conntrackd服务启动失败,提示日志文件权限拒绝及SELinux相关问题求助
大家好,我遇到了conntrackd服务启动失败的问题,核心报错是日志文件权限被拒绝,同时audit日志里还出现了SELinux相关的上下文信息,想请各位帮忙排查下问题根源和解决办法!
错误日志信息
Jun 25 15:01:19 ip-10-0-10-231 conntrackd[30874]: ERROR: can't open logfile `/var/log/binu/conntrackd-stats.log'.Reason: Permission denied
Jun 25 15:01:19 ip-10-0-10-231 systemd[1]: conntrackd.service: Main process exited, code=exited, status=1/FAILURE
Jun 25 15:01:19 ip-10-0-10-231 systemd[1]: conntrackd.service: Failed with result 'exit-code'.
Jun 25 15:01:19 ip-10-0-10-231 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=conntrackd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
服务状态检查结果
我执行了状态检查命令,输出如下:
$ systemctl status conntrackd.service × conntrackd.service - connection tracking daemon for debugging and High Availablity Loaded: loaded (/usr/lib/systemd/system/conntrackd.service; enabled; preset: disabled) Active: failed (Result: exit-code) since Tue 2024-06-25 15:01:19 UTC; 6min ago
目前我初步判断是/var/log/binu/conntrackd-stats.log文件或所在目录的权限配置有问题,但audit日志里的SELinux上下文信息让我有点疑惑,不确定是否还有SELinux策略限制的因素,想请教下该怎么一步步排查和解决这个问题?
备注:内容来源于stack exchange,提问作者vikramaditya234

