Skip to content

🐛 Bug: wrong ownership and SELinux label on /etc/cron.daily/csget #58

@incitem

Description

@incitem

CSF › Version

15.07

CSF › Release

Stable

System › OS

Linux

System › Distro & Version

AlmaLinux 9.6

Control Panel › Name

Generic (None)

Priority

Low

Issue Description

Lynis complains about wrong file ownership on /etc/cron.daily/csget:

» ll -Z /etc/cron.daily/csget
-rwx------. 1 1001 1001 system_u:object_r:usr_t:s0 17913 Oct 24 15:08 /etc/cron.daily/csget

That should be root:root and not 1001:1001.
Incidentally, the SELinux file label is incorrect:

» restorecon -v /etc/cron.daily/csget
Relabeled /etc/cron.daily/csget from system_u:object_r:usr_t:s0 to system_u:object_r:bin_t:s0

Steps To Reproduce

This issue is present on all my CSF 15.07 installs.

Fix: chown root:root and run restorecon after file install.

Logs › Lfd

No response

Config › csf.conf

No response

Screenshots

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions