-
Bug
-
Resolution: Done-Errata
-
Major
-
None
-
4.13
-
None
-
No
-
2
-
CMP Sprint 70, CMP Sprint 71, CMP Sprint 72, CMP Sprint 73, CMP Sprint 74, CMP Sprint 75, CMP Sprint 76
-
7
-
False
-
Description of problem:
RawSelinuxProfile is able to get to Reday State
Version-Release number of selected component (if applicable):
SPO 0.8.0
How reproducible:
Always
Steps to Reproduce:
1. Create RawSelinuxProfile CR: apiVersion: security-profiles-operator.x-k8s.io/v1alpha2 kind: RawSelinuxProfile metadata: name: nginx-secure-raw namespace: nginx-deploy spec: policy: | (block nginx-secure_nginx-deploy (blockinherit container) (allow process nginx-secure_nginx-deploy.process ( tcp_socket ( listen ))) (allow process http_cache_port_t ( tcp_socket ( name_bind ))) (allow process node_t ( tcp_socket ( node_bind )))) 2. Watch for it becomes ready: watch oc get rawselinuxprofile
Actual results:
$ oc get rawselinuxprofile NAME USAGE STATE nginx-secure-raw nginx-secure-raw_nginx-deploy.process
Expected results:
$ oc get rawselinuxprofile NAME USAGE STATE nginx-secure-raw nginx-secure-raw_nginx-deploy.process Installed
Additional info:
- links to
-
RHBA-2023:5958
OpenShift Security Profiles Operator bug fix update