Bug 2225088

Summary: [UBI9] rsyslogd fails to start with "could not transfer the specified internal posix capabilities settings to the kernel, capng_apply=-5" [rhel-9.2.0.z]
Product: Red Hat Enterprise Linux 9 Reporter: RHEL Program Management Team <pgm-rhel-tools>
Component: rsyslogAssignee: Attila Lakatos <alakatos>
Status: ON_QA --- QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: high    
Version: 9.2CC: alakatos, ben.hart, dapospis, davide, dhodovsk, jwboyer, lvrabec, rsroka, udaykumar9
Target Milestone: rcKeywords: AutoVerified, Triaged, ZStream
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: rsyslog-8.2102.0-113.el9_2.1 Doc Type: Bug Fix
Doc Text:
Cause: Rsyslog was not able to drop capabilities when executed as a normal user or in a containerized environment. Consequence: Rsyslog exited at startup. Fix: With the fix, if the process does not any capabilities, rsyslog will not try to drop them. Result: Rsyslog is able to start even if no capabilities are present.
Story Points: ---
Clone Of: 2216919 Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2216919    
Bug Blocks: