What were you trying to do that didn't work?

the power-profiles-daemon process runs under the "unconfined_service_t" label which means that the system can't pass the CIS 9 - "1.6.1.6 Ensure no unconfined services exist (Automated)".

Please provide the package NVR for which bug is seen:

How reproducible:

always

Steps to reproduce

1. Fresh install the RHEL9 with "Server with GUI".
2. Switch the system to graphical.target via "systemctl set-default graphical.target"
3. Check the process label via "ps -eZ|egrep 'unconfined_service_t'"

Expected results

the power-profiles-daemon process(es) are confined by SELinux, they do not run under the "unconfined_service_t" label

Actual results

# cat /etc/redhat-release
Red Hat Enterprise Linux release 9.3 (Plow)
# systemctl get-default
graphical.target
# ps -eZ|egrep 'unconfined_service_t'
system_u:system_r:unconfined_service_t:s0 862 ?  00:00:00 power-profiles-
system_u:system_r:unconfined_service_t:s0 865 ?  00:00:00 switcheroo-cont
#