ServerView Resource Orchestrator Virtual Edition V3.2.0 Setup Guide

H.1.2 Agent

After installing Resource Orchestrator, use the following procedure to configure SELinux.

1. Execute the following commands.

   • When using Red Hat Enterprise Linux 6

     # /usr/sbin/semanage fcontext -a -t unconfined_exec_t '/etc/rc\.d/init\.d/SCruiserAgent' <RETURN>
     # /usr/sbin/semanage fcontext -a -t unconfined_exec_t '/etc/rc\.d/init\.d/scwnaconfig-p[0-9]*' <RETURN>
     # /usr/sbin/semanage fcontext -a -t unconfined_exec_t '/etc/rc\.d/init\.d/scwagent' <RETURN>
     # /usr/sbin/semanage fcontext -a -t bin_t /opt/FJSVssagt/jre6/bin/java <RETURN>
     # /sbin/restorecon -R /etc/init.d <RETURN>
     # /sbin/restorecon /opt/FJSVssagt/jre6/bin/java <RETURN>

   • When using Red Hat Enterprise Linux 7.0

     # /usr/sbin/semanage fcontext -a -t unconfined_exec_t /opt/FJSVssagt/bin/SCruiserAgent <RETURN>
     # /usr/sbin/semanage fcontext -a -t unconfined_exec_t '/opt/systemcastwizard/scwnaconfig-p[0-9]*.sh' <RETURN>
     # /usr/sbin/semanage fcontext -a -t unconfined_exec_t /opt/systemcastwizard/scwagent <RETURN>
     # /usr/sbin/semanage fcontext -a -t bin_t /opt/FJSVssagt/jre6/bin/java <RETURN>
     # /sbin/restorecon /opt/FJSVssagt/bin/SCruiserAgent <RETURN>
     # /sbin/restorecon /opt/systemcastwizard/scwnaconfig-p[0-9]*.sh <RETURN>
     # /sbin/restorecon /opt/systemcastwizard/scwagent <RETURN>
     # /sbin/restorecon /opt/FJSVssagt/jre6/bin/java <RETURN>

   The label is configured in the file.

2. Check if the label of each file is correct.

   Execute the following commands.

   # ls -Z file <RETURN>

   For file, specify the target file for label check.

   Example

   To check the label of /opt/FJSVssagt/jre6/bin/java

   # ls -Z /opt/FJSVssagt/jre6/bin/java <RETURN>

   -rwxr-xr-x. root sys unconfined_u:object_r:bin_t:s0 /opt/FJSVssagt/jre6/bin/java

   The files and labels to check are as follows.

   Table H.2 Files to Check the Labels Of (Red Hat Enterprise Linux 6)

   File	Label
   /etc/init.d/SCruiserAgent	unconfined_exec_t
   /etc/init.d/scwagent
   /etc/init.d/scwnaconfig-p1
   /opt/FJSVssagt/jre6/bin/java	bin_t

   Table H.3 Files to Check the Labels Of (Red Hat Enterprise Linux 7)

   File	Label
   /opt/FJSVssagt/bin/SCruiserAgent	unconfined_exec_t
   /opt/systemcastwizard/scwagent
   /opt/systemcastwizard/scwnaconfig-p1.sh
   /opt/systemcastwizard/scwnaconfig-p2.sh
   /opt/FJSVssagt/jre6/bin/java	bin_t

3. Restart the agent.

   For details on how to restart the agent, refer to "2.2 Starting and Stopping Agents" in the "Operation Guide VE".