Back to bug 1843932
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Red Hat Bugzilla | 2020-06-04 12:49:10 UTC | Pool ID | sst_platform_security_rhel_8 | |
| Vojtech Polasek | 2020-06-05 14:16:00 UTC | Keywords | Triaged | |
| Matus Marhefka | 2020-06-11 09:39:59 UTC | Doc Text | .Systems installed as `Server with GUI` with the CIS profile do not start properly The CIS profile requires the removal of the `xorg-x11-server-common` (X Windows) package but does not require the change of the default target. As a consequence, the system is configured to run the GUI but the X Windows package is missing. As a result, the system does not start properly. To work around this problem, do not use the CIS profile with the `Server with GUI` software selection or customize the profile by removing the `package_xorg-x11-server-common_removed` and `xwindows_runlevel_target` rules. | |
| Doc Type | If docs needed, set a value | Known Issue | ||
| Lucie Vařáková | 2020-06-16 08:00:27 UTC | CC | lmanasko | |
| Docs Contact | mjahoda | |||
| Matěj Týč | 2020-06-17 13:47:54 UTC | Status | NEW | ASSIGNED |
| Component | scap-security-guide | oscap-anaconda-addon | ||
| CC | matyc | |||
| Assignee | vpolasek | matyc | ||
| Depends On | 1839769 | |||
| QA Contact | qe-baseos-security | release-test-team | ||
| Severity | unspecified | high | ||
| Matěj Týč | 2020-06-18 08:56:25 UTC | Status | ASSIGNED | POST |
| Jan Stodola | 2020-06-18 11:52:32 UTC | CC | jstodola | |
| Matěj Týč | 2020-06-22 18:00:17 UTC | Status | POST | MODIFIED |
| errata-xmlrpc | 2020-06-23 08:26:42 UTC | Status | MODIFIED | ON_QA |
| Gabriel Gaspar Becker | 2020-06-29 15:38:51 UTC | Fixed In Version | oscap-anaconda-addon-1.1.1-2.el8 | |
| Lucie Vařáková | 2020-07-21 12:19:02 UTC | Docs Contact | mjahoda | jvaldez |
| Petr Zatko | 2020-07-27 11:22:08 UTC | CC | pzatko | |
| Petr Zatko | 2020-07-27 11:29:53 UTC | Status | ON_QA | VERIFIED |
| Jacob Taylor Valdez | 2020-07-27 13:19:02 UTC | Flags | needinfo?(matyc) | |
| Matěj Týč | 2020-07-31 17:10:54 UTC | Flags | needinfo?(matyc) | |
| Dalibor Pospíšil | 2020-08-10 11:52:17 UTC | Pool ID | sst_platform_security_rhel_8 | sst_security_compliance_rhel_8 |
| Red Hat One Jira (issues.redhat.com) | 2020-10-30 12:20:17 UTC | Link ID | Red Hat Issue Tracker - Private RHELPLAN-45608 | |
| Red Hat One Jira (issues.redhat.com) | 2020-10-30 12:20:20 UTC | Link ID | Red Hat Issue Tracker - Private OPENSCAP-1789 | |
| Jacob Taylor Valdez | 2020-11-02 10:37:30 UTC | Doc Text | .Systems installed as `Server with GUI` with the CIS profile do not start properly The CIS profile requires the removal of the `xorg-x11-server-common` (X Windows) package but does not require the change of the default target. As a consequence, the system is configured to run the GUI but the X Windows package is missing. As a result, the system does not start properly. To work around this problem, do not use the CIS profile with the `Server with GUI` software selection or customize the profile by removing the `package_xorg-x11-server-common_removed` and `xwindows_runlevel_target` rules. | .Installation with the `Server with GUI` or `Workstation` software selections and CIS security profile is not possible The CIS profile is not compatible with the `Server with GUI` and `Workstation` software selection. As a consequence, a RHEL 8 installation with the `Server with GUI` software selection and CIS profile is not possible. An attempted installation using the CIS profile and either of these software selections will generate the error message: “package `xorg-x11-server-common` has been added to the list of excluded packages, but it can't be removed from the current software selection without breaking the installation.” To avoid the problem, do not use the CIS profile with the `Server with GUI` or `Workstation` software selections. |
| Flags | needinfo?(matyc) | |||
| Matěj Týč | 2020-11-02 13:51:43 UTC | Flags | needinfo?(matyc) | |
| errata-xmlrpc | 2020-11-03 01:33:11 UTC | Status | VERIFIED | RELEASE_PENDING |
| Jacob Taylor Valdez | 2020-11-03 11:13:51 UTC | Doc Text | .Installation with the `Server with GUI` or `Workstation` software selections and CIS security profile is not possible The CIS profile is not compatible with the `Server with GUI` and `Workstation` software selection. As a consequence, a RHEL 8 installation with the `Server with GUI` software selection and CIS profile is not possible. An attempted installation using the CIS profile and either of these software selections will generate the error message: “package `xorg-x11-server-common` has been added to the list of excluded packages, but it can't be removed from the current software selection without breaking the installation.” To avoid the problem, do not use the CIS profile with the `Server with GUI` or `Workstation` software selections. | .Installation with the `Server with GUI` or `Workstation` software selections and CIS security profile is not possible The CIS security profile is not compatible with the `Server with GUI` and `Workstation` software selections. As a consequence, a RHEL 8 installation with the `Server with GUI` software selection and CIS profile is not possible. An attempted installation using the CIS profile and either of these software selections will generate the error message: ---- package xorg-x11-server-common has been added to the list of excluded packages, but it can't be removed from the current software selection without breaking the installation. ---- To work around the problem, do not use the CIS security profile with the `Server with GUI` or `Workstation` software selections. |
| errata-xmlrpc | 2020-11-04 03:46:16 UTC | Status | RELEASE_PENDING | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2020-11-04 03:46:16 UTC | |||
| Lucie Vařáková | 2021-01-21 10:09:16 UTC | CC | lmanasko | jvaldez |
| Flags | needinfo?(jvaldez) | |||
| Matěj Týč | 2021-01-21 13:07:17 UTC | Flags | needinfo?(jvaldez) | |
| Lucie Vařáková | 2021-01-26 08:59:19 UTC | Doc Type | Known Issue | Bug Fix |
| Jan Fiala | 2021-01-28 11:19:48 UTC | CC | jafiala | |
| Mirek Jahoda | 2021-02-04 13:21:20 UTC | CC | mjahoda | |
| Mirek Jahoda | 2021-05-17 12:55:48 UTC | Docs Contact | jvaldez | mjahoda |
| Doc Type | Bug Fix | Known Issue | ||
| Red Hat One Jira (issues.redhat.com) | 2021-05-17 12:57:16 UTC | Link ID | Red Hat Issue Tracker OPENSCAP-1789 | |
| KalebHugo | 2022-04-27 20:18:06 UTC | CC | stephaniesteph86 | |
| mehage5402 | 2022-05-02 12:43:38 UTC | CC | mehage5402 | |
| Matus Marhefka | 2022-05-03 09:07:22 UTC | Doc Text | .Installation with the `Server with GUI` or `Workstation` software selections and CIS security profile is not possible The CIS security profile is not compatible with the `Server with GUI` and `Workstation` software selections. As a consequence, a RHEL 8 installation with the `Server with GUI` software selection and CIS profile is not possible. An attempted installation using the CIS profile and either of these software selections will generate the error message: ---- package xorg-x11-server-common has been added to the list of excluded packages, but it can't be removed from the current software selection without breaking the installation. ---- To work around the problem, do not use the CIS security profile with the `Server with GUI` or `Workstation` software selections. | .Installation with the `Server with GUI` or `Workstation` software selections and CIS Server security profiles is not possible The CIS Server Level 1 and Level 2 security profiles are not compatible with the `Server with GUI` and `Workstation` software selections. As a consequence, a RHEL 8 installation with the `Server with GUI` software selection and CIS Server profiles is not possible. An attempted installation using the CIS Server Level 1 or Level 2 profiles and either of these software selections will generate the error message: ---- package xorg-x11-server-common has been added to the list of excluded packages, but it can't be removed from the current software selection without breaking the installation. ---- When the `Server with GUI` or `Workstation` software selections are needed do not use the CIS Server Level 1 or Level 2 security profiles, use the CIS Workstation Level 1 or Level 2 profiles instead. |
| Jan Fiala | 2022-05-03 09:37:40 UTC | Flags | needinfo?(mmarhefk) | |
| Doc Text | .Installation with the `Server with GUI` or `Workstation` software selections and CIS Server security profiles is not possible The CIS Server Level 1 and Level 2 security profiles are not compatible with the `Server with GUI` and `Workstation` software selections. As a consequence, a RHEL 8 installation with the `Server with GUI` software selection and CIS Server profiles is not possible. An attempted installation using the CIS Server Level 1 or Level 2 profiles and either of these software selections will generate the error message: ---- package xorg-x11-server-common has been added to the list of excluded packages, but it can't be removed from the current software selection without breaking the installation. ---- When the `Server with GUI` or `Workstation` software selections are needed do not use the CIS Server Level 1 or Level 2 security profiles, use the CIS Workstation Level 1 or Level 2 profiles instead. | .Installation with the `Server with GUI` or `Workstation` software selections and CIS Server security profiles is not possible The CIS Server Level 1 and Level 2 security profiles are not compatible with the `Server with GUI` and `Workstation` software selections. As a consequence, a RHEL 8 installation with the `Server with GUI` software selection and CIS Server profiles is not possible. An attempted installation using the CIS Server Level 1 or Level 2 profiles and either of these software selections will generate the error message: ---- package xorg-x11-server-common has been added to the list of excluded packages, but it can't be removed from the current software selection without breaking the installation. ---- If you need to align systems with the `Server with GUI` or `Workstation` software selections according to CIS benchmarks, use the CIS Workstation Level 1 or Level 2 profiles instead. |
||
| Matus Marhefka | 2022-05-03 11:06:13 UTC | Flags | needinfo?(mmarhefk) | |
| Mirek Jahoda | 2022-05-10 13:18:38 UTC | Doc Text | .Installation with the `Server with GUI` or `Workstation` software selections and CIS Server security profiles is not possible The CIS Server Level 1 and Level 2 security profiles are not compatible with the `Server with GUI` and `Workstation` software selections. As a consequence, a RHEL 8 installation with the `Server with GUI` software selection and CIS Server profiles is not possible. An attempted installation using the CIS Server Level 1 or Level 2 profiles and either of these software selections will generate the error message: ---- package xorg-x11-server-common has been added to the list of excluded packages, but it can't be removed from the current software selection without breaking the installation. ---- If you need to align systems with the `Server with GUI` or `Workstation` software selections according to CIS benchmarks, use the CIS Workstation Level 1 or Level 2 profiles instead. | .`Server with GUI` and `Workstation` installations are not possible with CIS Server profiles The CIS Server Level 1 and Level 2 security profiles are not compatible with the `Server with GUI` and `Workstation` software selections. As a consequence, a RHEL 8 installation with the `Server with GUI` software selection and CIS Server profiles is not possible. An attempted installation using the CIS Server Level 1 or Level 2 profiles and either of these software selections will generate the error message: ---- package xorg-x11-server-common has been added to the list of excluded packages, but it can't be removed from the current software selection without breaking the installation. ---- If you need to align systems with the `Server with GUI` or `Workstation` software selections according to CIS benchmarks, use the CIS Workstation Level 1 or Level 2 profiles instead. |
| chase your seo | 2022-05-14 08:16:44 UTC | CC | ka5193086 | |
| petrikboss | 2022-05-29 16:49:53 UTC | Flags | needinfo?(mmarhefk) | |
| CC | nekigep956 | |||
| Matus Marhefka | 2022-06-20 08:32:26 UTC | Flags | needinfo?(mmarhefk) | |
| stephen | 2022-08-13 12:34:27 UTC | CC | hexof45454 | |
| rehman | 2022-08-28 09:04:02 UTC | CC | nekino5398 | |
| Flags | needinfo?(matyc) needinfo?(mjahoda) | |||
| Mirek Jahoda | 2022-08-30 10:47:40 UTC | Flags | needinfo?(matyc) needinfo?(mjahoda) | |
| Fran M. | 2022-09-01 13:27:45 UTC | Comment 32 Tag | spam | |
| Fran M. | 2022-09-01 13:27:51 UTC | Comment 33 Tag | spam | |
| pomol | 2022-10-10 13:04:39 UTC | Flags | needinfo?(mjahoda) | |
| CC | pomol11040 | |||
| pomol | 2022-10-10 13:05:26 UTC | Flags | needinfo?(mjahoda) | |
| jego | 2022-12-19 10:53:47 UTC | CC | jegol93876 | |
| qumar | 2023-07-24 08:14:10 UTC | Flags | needinfo?(mmarhefk) | |
| CC | koliv85132 | |||
| qumar | 2023-07-24 08:17:05 UTC | Flags | needinfo?(mmarhefk) | |
| Jonathan Wakely | 2023-07-24 21:06:51 UTC | Comment 39 Tag | spam | |
| Jonathan Wakely | 2023-07-24 21:07:01 UTC | Comment 40 Tag | spam |
Back to bug 1843932