Skip to content

🐛 Bug: wrong ownership and SELinux label on /etc/cron.daily/csget #58

@incitem

Description

@incitem

CSF › Version

15.07

CSF › Release

Stable

System › OS

Linux

System › Distro & Version

AlmaLinux 9.6

Control Panel › Name

Generic (None)

Priority

Low

Issue Description

Lynis complains about wrong file ownership on /etc/cron.daily/csget:

» ll -Z /etc/cron.daily/csget
-rwx------. 1 1001 1001 system_u:object_r:usr_t:s0 17913 Oct 24 15:08 /etc/cron.daily/csget

That should be root:root and not 1001:1001.
Incidentally, the SELinux file label is incorrect:

» restorecon -v /etc/cron.daily/csget
Relabeled /etc/cron.daily/csget from system_u:object_r:usr_t:s0 to system_u:object_r:bin_t:s0

Steps To Reproduce

This issue is present on all my CSF 15.07 installs.

Fix: chown root:root and run restorecon after file install.

Logs › Lfd

No response

Config › csf.conf

No response

Screenshots

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions