Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-56611

DISA STIG security profile cannot be installed in virtualization host

XMLWordPrintable

    • libvirt-10.8.0-1.el9
    • No
    • Moderate
    • rhel-sst-virtualization-storage
    • ssg_virtualization
    • 11
    • 3
    • Dev ack
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • All
    • 10.8.0
    • None

      What were you trying to do that didn't work?

      It's not possible to install a RHEL 9.4 host with the "Virtualization Host" package selection and at the same time apply the DISA STIG security profile.

      This is because the security profile prohibits the installation of the nfs-utils package which is pulled in by libvirt-daemon-driver-storage-core.

      libvirt-daemon-driver-storage-core requires nfs-utils for the showmount tool.

      This bug report is to consider the possibility of making the dependency on nfs-utils a weak one, or maybe split the libvirt support of network filesystem into another (weakly dependant) subpackage.

      Please provide the package NVR for which bug is seen:

      RHEL 9.4

      libvirt-daemon-driver-storage-core-10.0.0-6.6.el9_4.x86_64

      How reproducible:

      Always

      Steps to reproduce

      1. Install system with Anaconda
      2. Select "Virtualization Host" package selection and DISA STIG security profile

      Expected results

      Installation successful even if nfs-utils package is skipped.

      Actual results

      Installation fails:

       

      The following software marked for installation has errors.
This is likely caused by an error with your installation source.

Problem 1: package libguestfs-1:1.50.1-7.el9.x86_64 from
AppStream requires libvirt-daemon-driver-storage-core,
but none of the providers can be installed
 - package libvirt-daemon-driver-storage-
core-10.0.0-6.el9_4.x86_64 from AppStream requires nfs-
utils, but none of the providers can be installed
 - conflicting requests
 - package nfs-utils-1:2.5.4-25.el9.x86_64 from anaconda
is filtered out by exclude filtering

 Problem 2: package libvirt-daemon-driver-
storage-10.0.0-6.el9_4.x86_64 from AppStream requires
libvirt-daemon-driver-storage-core = 10.0.0-6.el9_4, but
none of the providers can be installed
 - package libvirt-10.0.0-6.el9_4.x86_64 from AppStream
requires libvirt-daemon-driver-storage = 10.0.0-6.el9_4,
but none of the providers can be installed
 - pakcage libvirt-daemon-driver-storage-
core-10.0.0-6.el9_4.x86_64 from AppStream requires nfs-
utils, but none of the providers can be installed
 - conflicting requests
 - package nfs-utils-1:2.5.4-25.el9.x86_64 from anaconda
is filtered out by exclude filtering

       

       

              pkrempa@redhat.com Peter Krempa
              rhn-support-jortialc Juan Orti
              Peter Krempa Peter Krempa
              Meina Li Meina Li
              Votes:
              0 Vote for this issue
              Watchers:
              12 Start watching this issue

                Created:
                Updated: