-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
rhel-10.0, rhel-10.1
-
None
-
None
-
None
-
rhel-security-selinux
-
None
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
What were you trying to do that didn't work?
Install RHEL 10 in minimal and install NSD.
The results of ps -eZ | grep nsd showed that the NSD process, which ran as nsd_t in EL9, had become unconfined_service_t.
What is the impact of this issue to you?
NSD does not work with restricted policies.
Please provide the package NVR for which the bug is seen:
selinux-policy-targeted-42.1.7-1.el10.noarch
How reproducible is this bug?:
100%
Steps to reproduce
- Install RHEL 9 and RHEL 10 minimally and install setools-console.
- seinfo -t | grep nsd
- NSD-related SELinux types are missing in EL10
Expected results
As with EL9, the presence of an SELinux type such as nsd_t is required.
EL9
$ seinfo -t | grep nsd isnsd_exec_t isnsd_initrc_exec_t isnsd_t isnsd_var_lib_t isnsd_var_run_t nsd_conf_t nsd_control_client_packet_t nsd_control_port_t nsd_control_server_packet_t nsd_crond_t nsd_exec_t nsd_log_t nsd_t nsd_tmp_t nsd_var_run_t nsd_zone_t rhnsd_conf_t rhnsd_exec_t rhnsd_initrc_exec_t rhnsd_t rhnsd_unit_file_t rhnsd_var_run_t
Actual results
EL10
$ seinfo -t | grep nsd isnsd_exec_t isnsd_initrc_exec_t isnsd_t isnsd_var_lib_t isnsd_var_run_t nsd_control_client_packet_t nsd_control_port_t nsd_control_server_packet_t rhnsd_conf_t rhnsd_exec_t rhnsd_initrc_exec_t rhnsd_t rhnsd_unit_file_t rhnsd_var_run_t
- is related to
-
RHEL-143688 The nsd selinux module is missing in RHEL10.
-
- Closed
-