https://github.com/osquery/osquery logo
Title
t

Tim Johnson

04/28/2022, 2:53 AM
See this
Apr 28 02:52:48 rockytest1 systemd[10220]: orbit.service: Failed to execute command: Permission denied
Apr 28 02:52:48 rockytest1 systemd[10220]: orbit.service: Failed at step EXEC spawning /var/lib/orbit/bin/orbit/orbit: Permission denied
m

Michal Nicpon

04/28/2022, 5:32 PM
This may be related to https://github.com/fleetdm/fleet/issues/4176. can you see if selinux is enabled by running
sestatus
also, check for denials using
ausearch -m avc -c orbit
t

Tim Johnson

04/28/2022, 8:57 PM
Indeed that was it, I put SELinux into permissive and life is good
m

Michal Nicpon

04/28/2022, 9:22 PM
Note, I wouldn't generally recommended putting SELinux into permissive mode, as you won't get the security benefits of SELinux. I expect the fix for this issue to be in the next release. You will be able to generate a new package and install it on platforms with SELinux enabled.