According to Cacti manual a CRON-job has to be setup. In the manual cactiuser is suggested. Such a user is not created from the ebuild. Other users have implications. For example apache – which is not root and runs the PHP files anyways – has limited capabilities with SELinux or App Armor. For example depending on the profile this user is not allowed to make ICMP requests. Reproducible: Always
Error message for example for AppArmor is Feb 21 15:33:17 <host> kernel: audit: type=1400 audit(1676989997.909:71): apparmor="DENIED" operation="create" profile="apache2" pid=2997 comm="ping" family="inet" sock_type="raw" protocol=1 requested_mask="create" denied_mask="create" I'd say it is technically feasible to enable this through App Armor's tools but from a security standpoint this capability is not necessary. Instead cactiuser should be available.
