Anacron job 'cron.daily' /etc/cron.daily/logrotate errors

[danami]

Username: danami

TITLE

Anacron job 'cron.daily' /etc/cron.daily/logrotate errors

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE

Product version: Plesk Obsidian 18.0.34.0
OS version: CentOS 7.9.2009 x86_64
Build date: 2021/03/05 11:00
Revision: f58e579d5ba4e92b8ff46d1ee497d895f9d2d366

PROBLEM DESCRIPTION

After upgrading to 18.0.34.0 we get this daily cron error email (we are seeing these errors on multiple servers that have been updated):

/etc/cron.daily/logrotate:
ls: cannot open directory /usr/lib64/httpd/modules: Permission denied
failed to open semaphore file /usr/local/psa/var/utilities.sem: Permission denied
System error 13: Permission denied

This is likely a bug in Plesk's SELinux policies as this is in the audit log.

grep utilities.sem /var/log/audit/audit.log
type=AVC msg=audit(1615887043.707:28126763): avc:  denied  { write } for  pid=2423 comm="packagemng" name="utilities.sem" dev="dm-0" ino=319287097 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=0

STEPS TO REPRODUCE

Update to Plesk Obsidian 18.0.34.0

ACTUAL RESULT

After upgrading to 18.0.34.0 we get cron error email

EXPECTED RESULT

logrorate should not send any errors

ANY ADDITIONAL INFORMATION



YOUR EXPECTATIONS FROM PLESK SERVICE TEAM

Confirm bug

 

[IgorG]

Already discussed here: Issue - Issue with/etc/cron.daily/logrotate after 18.0.34 upd

 

[danami]

OK great thanks IgorG