Error creating state file /run/wafd-logrotate.lock: Permission denied

Issue

The following email is received from Plesk server :

/etc/cron.daily/logrotate:
A dependency job for imunify360-pam.service failed. See 'journalctl -xe' for details.
error: error running non-shared postrotate script for 
/var/log/imunify360/pam.log of '/var/log/imunify360/pam.log'

Since then, strated receiving this other email every 10 minutes:

error: error creating state file /run/wafd-logrotate.lock: Permission denied
error: error opening /run/wafd-logrotate.lock: No such file or directory

Environment

• Imunify360
• Plesk

Solution

Our developers team has provided us a temporary workaround:

sed -i -r 's|-s\s+\S+\s+|-s /var/lib/logrotate/imunify360-wafd |' /etc/cron.d/imunify360-wafd-logrotate

This will update the lockfile path in the cron script to a directory permitted by SELinux policies.

Cause

Our team has identified the root cause of the issue as being related to SELinux. This is currently being addressed under task DEF-34791. A fix is in progress to implement the necessary policy adjustments to fully resolve the matter. 

In the meantime, the error can be safely disregarded.

The bug is gonna be fixed in webshield-1.34.3, which will start to roll out on 06-23-2025.