-
Bug
-
Resolution: Unresolved
-
Normal
-
rhel-9.0.0
-
avahi-0.8-21.el9
-
None
-
Moderate
-
sst_cs_plumbers
-
ssg_core_services
-
26
-
2
-
False
-
-
None
-
None
-
If docs needed, set a value
-
-
x86_64
-
None
+++ This bug was initially created as a clone of Bug #2132775 +++
Description of problem:
When installing the avahi rpm, the provided /var/run/avahi-daemon directory has root:root ownership as seen in 'rpm -qlv | grep avahi' output. Once the service is started, ownership is changed to avahi:avahi. This causes a CAT I STIG security finding in RHEL 8 and likely will do the same with the RHEL 9 STIG once it is released.
Version-Release number of selected component (if applicable):
avahi-0.8-12.el9.x86_64
How reproducible:
Every time
Steps to Reproduce:
1. dnf install avahi
2. "rpm -qlv avahi | grep 'var/run/avahi-daemon'" and note ownership
3. systemctl start avahi-daemon
4. "ls -ld /var/run/avahi-daemon" and note difference in ownership
Actual results:
Ownership in provided /var/run/avahi-daemon differ from /var/run/avahi-daemon after starting the service
Expected results:
Ownership in provided /var/run/avahi-daemon match the same after starting the service
Additional info:
The same or similar issue was previously reported in RHEL 7 but was designated 'wontfix'. Bug 1770402. I could not find this reported in RHEL 9, but hopefully I did not miss something if it has been.
- is blocked by
-
RHEL-5631 avahi package has incorrect owner:group defined in payload for /var/run/avahi-daemon
- Closed
- external trackers
- links to
-
RHBA-2024:138008 avahi bug fix update