Cmk-update plugin not able to pull the signed agents

Troubleshooting
13

However, this never lead to a failed update, and was displayed just for information.

Correct. Here, it is the missing SELinux rule to allow xinetd to execute RPM.
Adding the rule manually fixes the problem, but this really should be part of the built RPM file.

[Check_mk (deutsch)] SELinux Modul für auto-update bundle im RPM

For all who get the same error, here is how to compile and apply the SELinux rule:

  1. Install the policycoreutils-python-utils
  2. Save this contents to checkmk-agent-autoupgrade.te:
module checkmk-agent-autoupgrade 1.0;

require {
        type inetd_child_t;
        type rpm_script_t;
        class process transition;
}

#============= inetd_child_t ==============

allow inetd_child_t rpm_script_t:process transition;
  1. Compile and apply the rule (no reboot needed):
checkmodule -M -m -o checkmk-agent-autoupgrade.mod checkmk-agent-autoupgrade.te
semodule_package -o checkmk-agent-autoupgrade.pp -m checkmk-agent-autoupgrade.mod
semodule -i checkmk-agent-autoupgrade.pp