0x0
- 系统:centos7
- 内核:3.10.0-1160.15.2.el7.x86_64
今天用crontab创建定时任务,在测试时发现任务并没有按预期执行,
使用systemctl status crond 查看crond的状态
> # systemctl status crond
● crond.service - Command SchedulerLoaded: loaded (/usr/lib/systemd/system/crond.service; enabled; vendor preset: enabled)Active: active (running) since 一 2021-03-08 09:25:57 CST; 7min agoMain PID: 1445 (crond)Tasks: 1CGroup: /system.slice/crond.service└─1445 /usr/sbin/crond -n3月 08 09:25:57 A-boat systemd[1]: Started Command Scheduler.
3月 08 09:25:57 A-boat crond[1445]: (CRON) INFO (RANDOM_DELAY will be scaled with factor 82% if used.)
3月 08 09:25:57 A-boat crond[1445]: ((null)) Unauthorized SELinux context=system_u:system_r:system_cronjob...ntab)
3月 08 09:25:57 A-boat crond[1445]: (root) FAILED (loading cron table)
3月 08 09:25:58 A-boat crond[1445]: (CRON) INFO (running with inotify support)
3月 08 09:25:58 A-boat crond[1445]: (CRON) INFO (@reboot jobs will be run at computer's startup.)
3月 08 09:30:01 A-boat crond[1445]: (*system*) RELOAD (/etc/crontab)
3月 08 09:30:01 A-boat crond[1445]: ((null)) Unauthorized SELinux context=system_u:system_r:system_cronjob...ntab)
3月 08 09:30:01 A-boat crond[1445]: (root) FAILED (loading cron table)
Hint: Some lines were ellipsized, use -l to show in full.
可以看见,有一条和SElinux相关的信息:((null)) Unauthorized SELinux context=system_u:system_r:system_cronjob…ntab)
查询相关资料后发现是被SELinux阻止了
解决方案
执行以下命令
chcon -R -usystem_u -robject_r -tsystem_cron_spool_t /etc/crontab
systemctl restart crond