Bug 2170220

Created attachment 1944429 [details]
RHEL 9.0 DIS STIG GUI - upower broken

Description of problem:

When applying Security Profile: [ DRAFT] DISA STIG with GUI for Red Hat Enterprise Linux 9

The upower service fails to start


Version-Release number of selected component (if applicable):
Red Hat Enterprise 9.0
Red Hat Enterprise 9.1


How reproducible: Always

Steps to Reproduce:


1. Install a fresh RHEL 9.x system

  Note: Tested on KVM 2 CPUs 2GB RAM
  
Create the following partitions: ( To comply with DISA STIG )

Setup with 20GB disk size 

Select "Custom", click Done

Use: Create partition button to create then add the following: "Click here to create them automatically"

/home   - 2GB
/tmp    - 1GB
/var    - 2GB
/var/log/      - 2GB
/var/log/audit - 1GB
/var/tmp       - 1GB

Remainder of space to / ( root partiton ) ~ 8GB



2. Select the Security profiles:

Use: [ DRAFT] DISA STIG with GUI for Red Hat Enterprise Linux 9

Click select Profiles button 

The bottom window should display the changes made.

Finish install an



3. Check the Status of upower service 

Upon logging in and running 

# systemctl status upower



Actual results:

Feb 14 13:23:43 localhost systemd[1]: Starting Daemon for power management...
 Subject: A start job for unit upower.service has begun execution
 Defined-By: systemd
 Support: https://access.redhat.com/support
 
 A start job for unit upower.service has begun execution.
 
 The job identifier is 317.
Feb 14 13:23:43 localhost systemd[1047]: upower.service: Failed to set up user namespacing: No space left on device
Feb 14 13:23:43 localhost systemd[1047]: upower.service: Failed at step USER spawning /usr/libexec/upowerd: No space left on device
 Subject: Process /usr/libexec/upowerd could not be executed
 Defined-By: systemd
 Support: https://access.redhat.com/support
 
 The process /usr/libexec/upowerd could not be executed and failed.



Expected results:

upower service should be running and showing as active:

EXAMPLE: ( From RHEL 8 CSB Build ) 

$ systemctl status upower
- upower.service - Daemon for power management
   Loaded: loaded (/usr/lib/systemd/system/upower.service; disabled; vendor preset: enabled)
   Active: active (running) since Sun 2023-02-05 18:41:53 MST; 1 weeks 2 days ago
     Docs: man:upowerd(8)
 Main PID: 5919 (upowerd)
    Tasks: 3 (limit: 202556)
   Memory: 2.3M
   CGroup: /system.slice/upower.service
           └─5919 /usr/libexec/upowerd





Additional info:

See attached sosreport from both RHEL 9.0 and RHEL 9.1 systems.