---

   pmdaopenmetrics    ( 1 )

---

SELinux CONSIDERATIONS

Scripted config files are executed by the pmdaopenmetrics PMDA
       with the same SELinux context and policy as the local pmcd(1).
       For simple scripts, such as the load average example described
       above, this is normally fine.  However AVC errors may result for
       scripts that make library or system calls that are restricted by
       the prevailing SELinux context and policies.  In these cases it
       is not feasible to unilaterally grant pmcd or it's PMDAs an
       unconfined execution policy.  In these site specific cases it
       will be necessary to create a local SELinux policy module.  This
       can be done by capturing the AVC record(s) from the local audit
       log, generate a local policy module using audit2allow, and then
       load the new module using semodule, e.g. as follows :

              $ sudo grep '^type=AVC.*pcp' /var/log/audit/audit.log \
              | audit2allow -M mypolicy
              $ sudo semodule -i mypolicy.pp

       If these local policies need to be persistent across reboots,
       then a scriptlet similar to the above example may be added to the
       local pmcd RC file (typically /etc/pcp/pmcd/rc.local).  For
       further details, see audit2allow(1) and semodule(1).