-
标题
SELinux Policy Module installer script fails with 'Linux distribution not supported' error on RHEL 8.x -
说明
After installing syslog-ng Premium Edition on a RHEL 8.5, running the SELinux Policy Module installer script gives the following error:
> sh /opt/syslog-ng/share/doc/selinux/syslog_ng.sh --install-dir /opt/syslog-ng Detecting RHEL/CentOS/Oracle Linux version... You don't seem to be running a supported Linux distribution!
-
原因
Product defect. The SELinux Policy Module installer script is grepping for "Red Hat Enterprise Linux Server release", but this has changed in RHEL 8.x versions to only "Red Hat Enterprise Linux release", without the "Server", which results in the script unable to detect the Linux distribution. -
解决办法
This defect has been confirmed and change request #SYSLOGDEV-6236 has been raised for tracking of the issue.
There is no ETA on when the fix will be implemented in a future release as of yet.
Please review the list of Resolved Issues and Enhancement Requests published within the product release notes to determine if this specific Change Request is included in an upcoming release. Release notes are available at support.oneidentity.com under the technical documentation section of our website. We do not guarantee that all Change Requests will be implemented in future releases. For more information on our Product Enhancements and Defects policy, please consult the One Identity Global Support Guide https://support.oneidentity.com/essentials/support-guide
Workaround 1:
Change SELinux from enforcing to permissive on the syslog-ng server with the command:
# setenforce 0This way no SELinux policy is needed to be installed.Please note that this is a temporary change. To make it permanent, the /etc/selinux/config will need to be edited. A reboot is required for the edit to take effect. See SELinux man pages for more details.
Workaround 2:
Modify the script that creates the policy so it will recognize the OS that you are using. To make this change:
1. Backup the file# cp /opt/syslog-ng/share/doc/selinux/syslog_ng.sh /opt/syslog-ng/share/doc/selinux/syslog_ng.sh.backup2. Open the original file in a text editor and edit line 98 as follows:Change the text “Red Hat Enterprise Linux Server” for “Red Hat Enterprise Linux”After the edit the line should look like this:+++++++++++if lsb_release -d | grep -qE "Description:[[:space:]]+(CentOS|CentOS Linux|Red Hat Enterprise Linux|Oracle Linux Server|Enterprise Linux Enterprise Linux Server) release"; then+++++++++++3. Save and exitThe script should now be able to run and the SELinux policy will install correctly:# sh /opt/syslog-ng/share/doc/selinux/syslog_ng.sh --install-dir /opt/syslog-ng -
变更请求
SYSLOGDEV-6236