This is because of these lines:
./cobbler/sub_process.py: p = Popen(["id"], preexec_fn=lambda: os.setuid(100))
./koan/sub_process.py: p = Popen(["id"], preexec_fn=lambda: os.setuid(100))
'capability dac_override,' seems ok with this otherwise very restrictive profile. Thanks!
This is because of these lines: sub_process. py: p = Popen(["id"], preexec_fn=lambda: os.setuid(100)) sub_process. py: p = Popen(["id"], preexec_fn=lambda: os.setuid(100))
./cobbler/
./koan/
'capability dac_override,' seems ok with this otherwise very restrictive profile. Thanks!