Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-149801

Some SELinux types related to NSD are missing from the SELinux targeted policy in RHEL 10

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-10.0, rhel-10.1
    • selinux-policy
    • None
    • None
    • None
    • rhel-security-selinux
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      Install RHEL 10 in minimal and install NSD.

      The results of ps -eZ | grep nsd showed that the NSD process, which ran as nsd_t in EL9, had become unconfined_service_t.

      What is the impact of this issue to you?

      NSD does not work with restricted policies.

      Please provide the package NVR for which the bug is seen:

      selinux-policy-targeted-42.1.7-1.el10.noarch

      How reproducible is this bug?:

      100%

      Steps to reproduce

      1. Install RHEL 9 and RHEL 10 minimally and install setools-console.
      2. seinfo -t | grep nsd
      3. NSD-related SELinux types are missing in EL10

      Expected results

      As with EL9, the presence of an SELinux type such as nsd_t is required.

      EL9 

      $ seinfo -t | grep nsd isnsd_exec_t isnsd_initrc_exec_t isnsd_t isnsd_var_lib_t isnsd_var_run_t nsd_conf_t nsd_control_client_packet_t nsd_control_port_t nsd_control_server_packet_t nsd_crond_t nsd_exec_t nsd_log_t nsd_t nsd_tmp_t nsd_var_run_t nsd_zone_t rhnsd_conf_t rhnsd_exec_t rhnsd_initrc_exec_t rhnsd_t rhnsd_unit_file_t rhnsd_var_run_t

      Actual results

      EL10

      $ seinfo -t | grep nsd isnsd_exec_t isnsd_initrc_exec_t isnsd_t isnsd_var_lib_t isnsd_var_run_t nsd_control_client_packet_t nsd_control_port_t nsd_control_server_packet_t rhnsd_conf_t rhnsd_exec_t rhnsd_initrc_exec_t rhnsd_t rhnsd_unit_file_t rhnsd_var_run_t

              rhn-support-zpytela Zdenek Pytela
              archer_no3 Hiroki Nishimura
              Zdenek Pytela Zdenek Pytela
              SSG Security QE SSG Security QE
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: