Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-113906

the tuned-ppd service creates a mislabeled /etc/tuned/ppd_base_profile file

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • No
    • Low
    • 1
    • rhel-security-selinux
    • 1
    • QE ack
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • SELINUX 251029: 14
    • Hide

      The /etc/tuned/ppd_base_profile file is created with a correct SELinux label.

      Show
      The /etc/tuned/ppd_base_profile file is created with a correct SELinux label.
    • None
    • Automated
    • Unspecified
    • Unspecified
    • Unspecified
    • All
    • None

      What were you trying to do that didn't work?

      What is the impact of this issue to you?

      very low, the "restorecon -Rv /etc/tuned" command can fix the issue

      Please provide the package NVR for which the bug is seen:

      selinux-policy-38.1.65-1.el9.noarch
      selinux-policy-devel-38.1.65-1.el9.noarch
      selinux-policy-targeted-38.1.65-1.el9.noarch
      tuned-2.26.0-1.el9.noarch
      tuned-ppd-2.26.0-1.el9.noarch

      How reproducible is this bug?

      always

      Steps to reproduce

      1. install the tuned-ppd package
      2. delete the /etc/tuned/ppd_base_profile file
      3. start the tuned-ppd service
      4. check the SELinux label on /etc/tuned/ppd_base_profile

      Expected results

      # ls -lZ /etc/tuned/ppd_base_profile 
      -rw-r--r--. 1 root root system_u:object_r:tuned_rw_etc_t:s0 9 Sep 10 02:59 /etc/tuned/ppd_base_profile
      #
      

      Actual results:

      # ls -lZ /etc/tuned/ppd_base_profile 
      -rw-r--r--. 1 root root system_u:object_r:tuned_etc_t:s0 9 Sep 10 02:59 /etc/tuned/ppd_base_profile
      #
      

              rhn-support-zpytela Zdenek Pytela
              mmalik@redhat.com Milos Malik
              Zdenek Pytela Zdenek Pytela
              Milos Malik Milos Malik
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: