You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Oct 10, 2023. It is now read-only.
Bug description
(Capturing a report from a user of the Tanzu CLI)
Certain hardened RHEL installations prevents exec-ing of arbitrary binaries.
This is an issue since the Tanzu CLI plugin model involves the core binary executing commands from different plugin binaries.
Here is an example of strace output:
3392 10:13:45.139420 execve("/root/.local/share/tanzu-cli/tanzu-plugin-cluster", ["/root/.local/share/tanzu-cli/tan"..., "post-install"], 0xc00002e210 /* 21 vars */ <unfinished ...>
3392 10:13:45.139620 <... execve resumed>) = -1 EPERM (Operation not permitted) <0.000156>
3392 10:13:45.139634 write(10, "\1\0\0\0\0\0\0\0", 8) = 8 <0.000007>
3392 10:13:45.139660 exit(253 <unfinished ...>
3392 10:13:45.139751 <... exit resumed>) = ?
3392 10:13:45.139797 +++ exited with 253 +++
**Affected product area (please put an X in all that apply)**
- APIs
- Addons
- X CLI
- Docs
- IAM
- X Installation
- X Plugin
- Security
- Test and Release
- User Experience
**Expected behavior**
Unless the plugin architecture is changed to account for this, it is unclear what can be done other than white-listing the plugin binaries on said systems.
**Steps to reproduce the bug**
Only reproduceable on certain RHEL configurations
**Version** (include the SHA if the version is not obvious)
any
**Environment where the bug was observed (cloud, OS, etc)**
**Relevant Debug Output (Logs, manifests, etc)**
The text was updated successfully, but these errors were encountered:
Bug description
(Capturing a report from a user of the Tanzu CLI)
Certain hardened RHEL installations prevents exec-ing of arbitrary binaries.
This is an issue since the Tanzu CLI plugin model involves the core binary executing commands from different plugin binaries.
Here is an example of strace output:
The text was updated successfully, but these errors were encountered: