I experimented with giving Java as the subject perm-any to all objects and ActiveMQ worked. From there we paired it down. So the initial launch was working, but then it would fail later, not because ActiveMQ had problems but because Java didn't have enough permissions to start other aspects of ActiveMQ It was reduced down to three rules not allowing complete access for java. so it is working now.
-----Original Message----- From: Jean-Baptiste Onofré <j...@nanthrax.net> Sent: Tuesday, May 21, 2024 8:42 AM To: users@activemq.apache.org Subject: [EXTERNAL] Re: ActiveMQ with RHEL 8+ Hi It's possible fapolicyd blocks ActiveMQ, it depends what you have /etc/fapolicyd/rules.d. Do you launch ActiveMQ via the wrapper or via the bin/activemq script ? Regards JB On Wed, May 15, 2024 at 10:52 PM Wheat,Michael R (BPA) - TTST-DITT-2 <mrwh...@bpa.gov.invalid> wrote: > > I have a situation where we have to use fapolicyd, and when its enabled, > ActiveMQ won't start. > If I disable fapolicyd, then start activemq, it seems to work fine. Then when > I re-enable fapolicyd, activemq fails. > > So I have some rules permitting activemq to operate added to fapolicyd. > > Now activemq still wont start unless it is enable before fapolicyd is > enabled, and then it works fine. > > So I suspect that there is some dependency within activemq that is being > blocked by the fapolicyd, but I know not what. > > Surely our team cannot be the first to attempt to use fapolicyd with > activemq, but I cannot seem to find any documentation online from either RHEL > or ActiveMQ, nor any of the chat boards discussing this scenario. > > Does anyone have any input? > > > Very Respectfully, > > Michael R. Wheat >
