Bug 1667016

Summary: [VMware][RHEL 8]vmtools is not able to execute the sudo command rapidly
Product: Red Hat Enterprise Linux 8 Reporter: Renaud Métrich <rmetrich>
Component: selinux-policyAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED ERRATA QA Contact: Bo Yang <boyang>
Severity: medium Docs Contact:
Priority: medium    
Version: 8.0CC: boyang, jsavanyo, ldu, lvrabec, mmalik, plautrba, ssekidde, yacao, zpytela
Target Milestone: rcFlags: pm-rhel: mirror+
Target Release: 8.1   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1656814 Environment:
Last Closed: 2019-11-05 22:09:45 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1656814, 1673107, 1682526    
Bug Blocks:    

Comment 1 Bo Yang 2019-03-15 09:47:04 UTC 
WW11.5 UPDATE


Based on steps in Description, reproduced it in RHEL8.


ENV:
Host: Workstation 15 Pro
Guest: RHEL8
Compatibility: Workstation 15 Pro(VM version 16)


Steps to Reproduce:
1. Install WS15
2. Check VIX configurationnone
3. Install RHEL8 as the Guest in the WS15
4. Execute "vmrun -T player -gu root -gp redhat runProgramInGuest "/home/boyang/VMware/rhel8_20190116.1_bios_sas/rhel8_20190116.1_bios_sas.vmx" /bin/sudo ls" in the terminal
5. Check the aduit and secure log from Guest /var/


Actual results:
1. After step 4, Couldn't execute the sudo command rapidly


Thanks.

BR,
BO
Comment 4 Bo Yang 2019-05-06 11:38:51 UTC 
WW18.1 UPDATE:


Verified this BZ in RHEL8 nightly BUILD as selinux-policy and its related packages need to be updated firstly. 
Couldn't meet it and "Permission denied" issue found in RHEL7


ENV:
    0. Host:          Windows Server
    1. Guest:         RHEL8 nightly build in WS15
    2. Compatibility: Workstation 15 Pro(VM version 16)


Steps to Try:
    0. Install a WS15 and its components in Host of ENV

    1. Install / Upgrade a RHEL8 nightly BUILD as the Guest in WS15

    2. Upgrade selinux-policy and selinux-policy-targeted in the Guest

    3. "vmrun -T ws -gu root -gp redhat runProgramInGuest "C:\Users\Administrator\Documents\Virtual Machines\Renaud_BZ1656814\Renaud_BZ1656814.vmx" /usr/bin/hostnamectl" in Host Powershell terminal

    4. "cat /var/log/secure"

    5. "cat /var/log/audit/audit.log"

    6. Try below CMDs again under above steps:
        /usr/bin/hostnamectl
        /usr/bin/machinectl
        /usr/bin/localectl
        /usr/bin/timedatectl
        /usr/bin/loginctl



Result:
    0. After step 2,
        root@localhost ~]# rpm -qa | grep selinux-policy
        selinux-policy-3.14.3-4.el8.noarch
        selinux-policy-targeted-3.14.3-4.el8.noarch

    1. After step 3, execute command rapidly

    2. After step 4 and 5, NO related failure log or "Permission denied" issue


Change "Status" to "VERIFIED', if you have any question / requirement, you can change the "Status"


Thanks.


BR,
BO
Comment 6 errata-xmlrpc 2019-11-05 22:09:45 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:3547