Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-56611

DISA STIG security profile cannot be installed in virtualization host

    • No
    • None
    • sst_virtualization_storage
    • ssg_virtualization
    • None
    • Dev ack
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • All
    • 10.8.0
    • None

      What were you trying to do that didn't work?

      It's not possible to install a RHEL 9.4 host with the "Virtualization Host" package selection and at the same time apply the DISA STIG security profile.

      This is because the security profile prohibits the installation of the nfs-utils package which is pulled in by libvirt-daemon-driver-storage-core.

      libvirt-daemon-driver-storage-core requires nfs-utils for the showmount tool.

      This bug report is to consider the possibility of making the dependency on nfs-utils a weak one, or maybe split the libvirt support of network filesystem into another (weakly dependant) subpackage.

      Please provide the package NVR for which bug is seen:

      RHEL 9.4

      libvirt-daemon-driver-storage-core-10.0.0-6.6.el9_4.x86_64

      How reproducible:

      Always

      Steps to reproduce

      1. Install system with Anaconda
      2. Select "Virtualization Host" package selection and DISA STIG security profile

      Expected results

      Installation successful even if nfs-utils package is skipped.

      Actual results

      Installation fails:

       

      The following software marked for installation has errors.
      This is likely caused by an error with your installation source.
      
      Problem 1: package libguestfs-1:1.50.1-7.el9.x86_64 from
      AppStream requires libvirt-daemon-driver-storage-core,
      but none of the providers can be installed
       - package libvirt-daemon-driver-storage-
      core-10.0.0-6.el9_4.x86_64 from AppStream requires nfs-
      utils, but none of the providers can be installed
       - conflicting requests
       - package nfs-utils-1:2.5.4-25.el9.x86_64 from anaconda
      is filtered out by exclude filtering
      
       Problem 2: package libvirt-daemon-driver-
      storage-10.0.0-6.el9_4.x86_64 from AppStream requires
      libvirt-daemon-driver-storage-core = 10.0.0-6.el9_4, but
      none of the providers can be installed
       - package libvirt-10.0.0-6.el9_4.x86_64 from AppStream
      requires libvirt-daemon-driver-storage = 10.0.0-6.el9_4,
      but none of the providers can be installed
       - pakcage libvirt-daemon-driver-storage-
      core-10.0.0-6.el9_4.x86_64 from AppStream requires nfs-
      utils, but none of the providers can be installed
       - conflicting requests
       - package nfs-utils-1:2.5.4-25.el9.x86_64 from anaconda
      is filtered out by exclude filtering
      

       

       

            pkrempa@redhat.com Peter Krempa
            rhn-support-jortialc Juan Orti
            Peter Krempa Peter Krempa
            Meina Li Meina Li
            Votes:
            0 Vote for this issue
            Watchers:
            10 Start watching this issue

              Created:
              Updated: