Skip to content

RPM deployment fails with SELinux enabled #75

@deajan

Description

@deajan

Hello,

Tried to deploy cortext-tenant 1.14 on AlmaLinux 9.4 with SELinux enabled.

I got the following

type=AVC msg=audit(1726562570.288:7307): avc:  denied  { create } for  pid=26074 comm="useradd" name=".bash_logout" scontext=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=0

So basically I had to run the after_install.sh script manually to create the user and home directory.
Also, the script misses a chown ${USER}:${USER} /etc/cortex-tenant.yml line I think.

Perhaps before running after_install.sh script you may run chcon -t bin_t after_install.sh

Thanks for your work ;)
Helps me a lot using mimir.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions