AppDynamics does not directly support SELinux. For troubleshooting SELinux, consult your security team.
This page lists the requirements for monitoring Apache with SELinux.
The Apache agent requires the following:
- Read/write/execute privileges on <agent-install-dir>/logs directory.
- Read/write/execute privileges on <agent-install-dir>/logs/appd-sdk directory.
- The ability to read, write, create, and unlink Unix sockets.
- The ability to create, write, add_name, remove_name, and setattr on class dir.
- For automatically launching the proxy on RHEL/Centos 7, class capability2 block_suspend.
- Read/execute privileges on <agent-install-dir>/WebServerAgent/Apache/libmod_appdynamics.so and/or libmod_appdynamics22.so.
- Read/execute privileges on <agent-install-dir>/sdk_lib/lib/libappdynamics_native_sdk.so
- Read/execute privileges on <agent-install-dir>/conf
- Read privilege on <agent-install-dir>/conf/appdynamics_agent_log4cxx.xml
Note: Many of the read/write requirements can be met by setting the type, recursively, of the <agent-install-dir> to httpd_sys_rw_content_t.
