Skip to content
This repository has been archived by the owner on Oct 10, 2023. It is now read-only.

Tanzu CLI is unable to work under certain hardened RHEL installation #2706

Open
vuil opened this issue Jun 21, 2022 · 1 comment
Open

Tanzu CLI is unable to work under certain hardened RHEL installation #2706

vuil opened this issue Jun 21, 2022 · 1 comment

Comments

@vuil
Copy link
Contributor

vuil commented Jun 21, 2022

Bug description
(Capturing a report from a user of the Tanzu CLI)
Certain hardened RHEL installations prevents exec-ing of arbitrary binaries.
This is an issue since the Tanzu CLI plugin model involves the core binary executing commands from different plugin binaries.
Here is an example of strace output:

 3392 10:13:45.139420 execve("/root/.local/share/tanzu-cli/tanzu-plugin-cluster", ["/root/.local/share/tanzu-cli/tan"..., "post-install"], 0xc00002e210 /* 21 vars */ <unfinished ...>
 3392 10:13:45.139620 <... execve resumed>) = -1 EPERM (Operation not permitted) <0.000156>
 3392 10:13:45.139634 write(10, "\1\0\0\0\0\0\0\0", 8) = 8 <0.000007>
 3392 10:13:45.139660 exit(253 <unfinished ...>
 3392 10:13:45.139751 <... exit resumed>) = ?
 3392 10:13:45.139797 +++ exited with 253 +++

**Affected product area (please put an X in all that apply)**

- APIs
- Addons
- X CLI
- Docs
- IAM
- X Installation
- X Plugin
- Security
- Test and Release
- User Experience

**Expected behavior**

Unless the plugin architecture is changed to account for this, it is unclear what can be done other than white-listing the plugin binaries on said systems.

**Steps to reproduce the bug**

Only reproduceable on certain RHEL configurations

**Version** (include the SHA if the version is not obvious)
any

**Environment where the bug was observed (cloud, OS, etc)**

**Relevant Debug Output (Logs, manifests, etc)**
@vuil vuil added kind/bug PR/Issue related to a bug needs-triage Indicates an issue or PR needs to be triaged area/cli area/plugin and removed needs-triage Indicates an issue or PR needs to be triaged labels Jun 21, 2022
@vuil
Copy link
Contributor Author

vuil commented Jun 21, 2022

Just filing to track the reported issue, but this is not something we can address in the near future.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants