CentOS 7: cannot create user data directory from cron

snapd
1

I have installed snap and a certbot package.
Running certbot from shell works fine.
When I try to run certbot from cron, I get the following error:

cmd_run.go:991: WARNING: cannot create user data directory: failed to verify SELinux context of /root/snap: exec: "matchpathcon": executable file not found in $PATH

Any ideas what is going wrong?

# which matchpathcon
/sbin/matchpathcon

# snap version
snap    2.47.1-1.el7
snapd   2.47.1-1.el7
series  16
centos  7
kernel  3.10.0-1127.19.1.el7.x86_64

# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      31
2

Maybe the cron job is run with different $PATH setting, one that does not include /sbin.

Does it fail though?

3

It does run and work.
The server is running a a stock version of CentOS 7. The PATH variable is set to /usr/bin:/bin for system crons defined through /etc/cron.d/

Adding the /sbin path to PATH variables removes the warning.

I suspect this may be a common issue though worth looking into.