Skip to content

ENT-14405: Allowed sshd_session_t access to /opt/cfengine on EL10 - #6278

Merged
nickanderson merged 1 commit into
cfengine:masterfrom
nickanderson:ENT-14405/master
Aug 8, 2026
Merged

ENT-14405: Allowed sshd_session_t access to /opt/cfengine on EL10#6278
nickanderson merged 1 commit into
cfengine:masterfrom
nickanderson:ENT-14405/master

Conversation

@nickanderson

@nickanderson nickanderson commented Aug 8, 2026

Copy link
Copy Markdown
Member

On EL10 the process that reads a transport user's authorized_keys runs as sshd_session_t rather than sshd_t, so the existing rule no longer applies and every Federated Reporting dump pull fails.

@nickanderson nickanderson changed the title ENT-14405: Fix Federated Reporting transport on RHEL 10 hubs ENT-14405: Fixed Federated Reporting transport on RHEL 10 hubs Aug 8, 2026
@nickanderson

nickanderson commented Aug 8, 2026

Copy link
Copy Markdown
Member Author

@nickanderson nickanderson changed the title ENT-14405: Fixed Federated Reporting transport on RHEL 10 hubs ENT-14405: Allowed sshd_session_t access to /opt/cfengine on EL10 Aug 8, 2026
Ticket: ENT-14405
Changelog: Fixed Federated Reporting transport failing on RHEL 10 hubs
@nickanderson
nickanderson merged commit 82953ed into cfengine:master Aug 8, 2026
16 checks passed
@nickanderson nickanderson added the cherry-pick? Fixes which may need to be cherry-picked to LTS branches label Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cherry-pick? Fixes which may need to be cherry-picked to LTS branches

Development

Successfully merging this pull request may close these issues.

1 participant