Skip to content

RPM deployment fails with SELinux enabled #75

Open
@deajan

Description

Hello,

Tried to deploy cortext-tenant 1.14 on AlmaLinux 9.4 with SELinux enabled.

I got the following

type=AVC msg=audit(1726562570.288:7307): avc:  denied  { create } for  pid=26074 comm="useradd" name=".bash_logout" scontext=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=0

So basically I had to run the after_install.sh script manually to create the user and home directory.
Also, the script misses a chown ${USER}:${USER} /etc/cortex-tenant.yml line I think.

Perhaps before running after_install.sh script you may run chcon -t bin_t after_install.sh

Thanks for your work ;)
Helps me a lot using mimir.

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions