Bug 1933164
Summary: | Selinux blocks websockify, vnc console is blocked | ||
---|---|---|---|
Product: | Red Hat Satellite | Reporter: | James Jeffers <jjeffers> |
Component: | SELinux | Assignee: | Lukas Zapletal <lzap> |
Status: | CLOSED ERRATA | QA Contact: | Lukas Pramuk <lpramuk> |
Severity: | medium | Docs Contact: | |
Priority: | unspecified | ||
Version: | 6.7.0 | CC: | ktordeur, lzap, zhunting |
Target Milestone: | 6.8.5 | Keywords: | Triaged |
Target Release: | Unused | ||
Hardware: | All | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | foreman-selinux-2.1.2.4-1,foreman-selinux-2.1.2.5-1 | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | 1868005 | Environment: | |
Last Closed: | 2021-03-31 19:48:19 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Comment 3
Lukas Pramuk
2021-03-16 02:47:40 UTC
We need this patch: https://projects.theforeman.org/issues/32110 VERIFIED. @Satellite 6.8.5 Snap2 foreman-selinux-2.1.2.5-1.el7sat.noarch by the reproducer described in comment#0 1) Select any provisioned host 2) Click [Console] button # semodule -l | grep foreman foreman 2.1.2.5 # grep websockify /var/log/audit/audit.log <empty> >>> no selinux denials Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Satellite 6.8.5 Async Bug Fix Update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:1057 |