Bug 1815551

Summary:	baremetal image requires /etc/passwd be writable
Product:	OpenShift Container Platform	Reporter:	Andrea Fasano <afasano>
Component:	Installer	Assignee:	Stephen Benjamin <stbenjam>
Installer sub component:	OpenShift on Bare Metal IPI	QA Contact:	Amit Ugol <augol>
Status:	CLOSED ERRATA	Docs Contact:
Severity:	unspecified
Priority:	unspecified	CC:	rbartal, skuznets
Version:	4.4
Target Milestone:	---
Target Release:	4.4.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1815537	Environment:
Last Closed:	2020-05-04 11:47:02 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1815537
Bug Blocks:

Description Andrea Fasano 2020-03-20 14:44:07 UTC

+++ This bug was initially created as a clone of Bug #1815537 +++

Description of problem: 
The test infra requires that /etc/passwd will be writable. The underlying issue is not a cve, it is trivial for any container launcher to gain control of /etc/passwd.  The baremetal image is intended for a wide range of uses and this use is deliberate until we have moved all test infra to a 4.x version.

Comment 2 Raviv Bar-Tal 2020-03-24 13:15:31 UTC

Andrea Fasano help verifying this BZ, it is working form CI

Comment 7 errata-xmlrpc 2020-05-04 11:47:02 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0581