Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-61117

[rhel-9] the power-profiles-daemon service runs under unconfined_service_t label

    • None
    • Moderate
    • 1
    • sst_security_selinux
    • ssg_security
    • 20
    • 3
    • QE ack
    • False
    • Hide

      None

      Show
      None
    • Yes
    • Red Hat Enterprise Linux
    • SELINUX 241106 - 241127
    • Hide

      The power-profiles-daemon service is confined by SELinux. The service starts and runs in enforcing mode. The service does not trigger any SELinux denials in default configuration.

      Show
      The power-profiles-daemon service is confined by SELinux. The service starts and runs in enforcing mode. The service does not trigger any SELinux denials in default configuration.
    • None
    • Automated
    • Unspecified Release Note Type - Unknown
    • x86_64
    • None

      What were you trying to do that didn't work?

      the power-profiles-daemon process runs under the "unconfined_service_t" label which means that the system can't pass the CIS 9 - "1.6.1.6 Ensure no unconfined services exist (Automated)".

      Please provide the package NVR for which bug is seen:

      How reproducible:

      always

      Steps to reproduce

      1. Fresh install the RHEL9 with "Server with GUI".
      2. Switch the system to graphical.target via "systemctl set-default graphical.target"
      3. Check the process label via "ps -eZ|egrep 'unconfined_service_t'"

      Expected results

      the power-profiles-daemon process(es) are confined by SELinux, they do not run under the "unconfined_service_t" label

      Actual results

      # cat /etc/redhat-release
      Red Hat Enterprise Linux release 9.3 (Plow)
      # systemctl get-default
      graphical.target
      # ps -eZ|egrep 'unconfined_service_t'
      system_u:system_r:unconfined_service_t:s0 862 ?  00:00:00 power-profiles-
      system_u:system_r:unconfined_service_t:s0 865 ?  00:00:00 switcheroo-cont
      #
      

              rhn-support-zpytela Zdenek Pytela
              rhn-support-yalu Yanquan Lu
              Jaroslav Skarvada
              Zdenek Pytela Zdenek Pytela
              Milos Malik Milos Malik
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: