Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-101165

/etc/redis.conf has context 'etc_t' when it should have 'redis_conf_t'

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • No
    • Low
    • Customer Facing, Customer Reported
    • rhel-security-selinux
    • 0.5
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • Red Hat Enterprise Linux
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • x86_64
    • None

      What were you trying to do that didn't work?

      > Trying to RWRITE the CONFIG of redis using redis-cli.

      What is the impact of this issue to you?

      > Unable to REWRITE the CONFIG of redis 

      Please provide the package NVR for which the bug is seen:

      SELINUX:

      libselinux-utils-2.9-10.el8_10.x86_64
      selinux-policy-targeted-3.14.3-139.el8_10.1.noarch
      libselinux-2.9-10.el8_10.x86_64
      python3-libselinux-2.9-10.el8_10.x86_64
      selinux-policy-3.14.3-139.el8_10.1.noarch

      REDIS:

      redis-5.0.3-5.module+el8.4.0+12927+b9845322.x86_64

      redis-6.2.18-1.module+el8.10.0+23050+05ea4e95.x86_64

      How reproducible is this bug?

      Steps to reproduce

      1. # dnf module install redis:5
      2. # systemctl enable --now redis
      3. # redis-cli
      4. 127.0.0.1:6379> CONFIG set requirepass password
      5. 127.0.0.1:6379>  AUTH password
      6. 127.0.0.1:6379> CONFIG REWRITE

      Expected results

      [root@Rhel8 ~]# redis-cli

      127.0.0.1:6379> AUTH password

      OK

      127.0.0.1:6379> CONFIG REWRITE

      OK

      Actual results

      [root@Rhel8 ~]# redis-cli

      127.0.0.1:6379> CONFIG set requirepass password

      OK

      127.0.0.1:6379> AUTH password

      OK

      127.0.0.1:6379> CONFIG REWRITE

      (error) ERR Rewriting config file: Permission denied

              rhn-support-zpytela Zdenek Pytela
              rhn-support-gasoni Gaurav Soni
              Zdenek Pytela Zdenek Pytela
              SSG Security QE SSG Security QE
              Votes:
              1 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated: