Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RHEL8 with GUI can't be installed when CIS security policy is selected #5746

Closed
mildas opened this issue May 7, 2020 · 2 comments
Closed

RHEL8 with GUI can't be installed when CIS security policy is selected #5746

mildas opened this issue May 7, 2020 · 2 comments
Labels
productization-issue Issue found in upstream stabilization process.

Comments

@mildas
Copy link
Contributor

mildas commented May 7, 2020

Description of problem:

It is not possible to install RHEL8 when CIS security profile is selected because of packages conflict.

SCAP Security Guide Version:

14fde08

Operating System Version:

RHEL 8

Steps to Reproduce:

  1. Start RHEL 8 installation with GUI and selected CIS profile as security policy

Actual Results:

Installation fails on package conflicts.

Expected Results:

Installation is successful.

Addition Information/Debugging Steps:

Problem is caused most likely by package_xorg-x11-server-common_removed rule.
gdm package requires it, thus causing conflict that aborts the installation.

See log from installation:

 Problem 1: package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 2: package xorg-x11-drv-libinput-0.29.0-1.el8.x86_64 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-libinput-0.29.0-1.el8.x86_64 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-libinput-0.29.0-1.el8.x86_64 requires xserver-abi(xinput-24) >= 1, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 3: package xorg-x11-drv-qxl-0.1.5-11.el8.x86_64 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-qxl-0.1.5-11.el8.x86_64 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-qxl-0.1.5-11.el8.x86_64 requires xserver-abi(videodrv-24) >= 0, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 4: package xorg-x11-drv-nouveau-1:1.0.15-4.el8.1.x86_64 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-nouveau-1:1.0.15-4.el8.1.x86_64 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-nouveau-1:1.0.15-4.el8.1.x86_64 requires xserver-abi(videodrv-24) >= 0, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 5: package xorg-x11-drv-vesa-2.4.0-3.el8.x86_64 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-vesa-2.4.0-3.el8.x86_64 requires xorg-x11-server-wrapper, but none of the providers can be installed
  - package xorg-x11-drv-vesa-2.4.0-3.el8.x86_64 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-vesa-2.4.0-3.el8.x86_64 requires xserver-abi(videodrv-24) >= 0, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 6: package xorg-x11-drv-fbdev-0.5.0-2.el8.x86_64 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-fbdev-0.5.0-2.el8.x86_64 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-fbdev-0.5.0-2.el8.x86_64 requires xserver-abi(videodrv-24) >= 0, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 7: package initial-setup-gui-0.3.62.1-1.el8.x86_64 requires xorg-x11-server-Xorg, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 8: package xorg-x11-drv-evdev-2.10.6-2.el8.x86_64 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-evdev-2.10.6-2.el8.x86_64 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-evdev-2.10.6-2.el8.x86_64 requires xserver-abi(xinput-24) >= 1, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 9: package xorg-x11-drv-wacom-0.38.0-1.el8.x86_64 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-wacom-0.38.0-1.el8.x86_64 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-wacom-0.38.0-1.el8.x86_64 requires xserver-abi(xinput-24) >= 1, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 10: package gnome-session-wayland-session-3.28.1-8.el8.x86_64 requires xorg-x11-server-Xwayland(x86-64), but none of the providers can be installed
  - package xorg-x11-server-Xwayland-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 11: package xorg-x11-drv-ati-19.0.1-2.el8.x86_64 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-ati-19.0.1-2.el8.x86_64 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-ati-19.0.1-2.el8.x86_64 requires xserver-abi(videodrv-24) >= 0, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 12: package xorg-x11-drv-vmware-13.2.1-8.el8.x86_64 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-vmware-13.2.1-8.el8.x86_64 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-vmware-13.2.1-8.el8.x86_64 requires xserver-abi(videodrv-24) >= 0, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 13: package gdm-1:3.28.3-29.el8.x86_64 requires gnome-session-wayland-session, but none of the providers can be installed
  - package gnome-session-wayland-session-3.28.1-8.el8.x86_64 requires xorg-x11-server-Xwayland(x86-64), but none of the providers can be installed
  - package gnome-initial-setup-3.28.0-8.el8.x86_64 requires libgdm.so.1()(64bit), but none of the providers can be installed
  - package xorg-x11-server-Xwayland-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 14: package gdm-1:3.28.3-29.el8.x86_64 requires gnome-session-wayland-session, but none of the providers can be installed
  - package gnome-session-wayland-session-3.28.1-8.el8.x86_64 requires xorg-x11-server-Xwayland(x86-64), but none of the providers can be installed
  - package gnome-shell-3.32.2-14.el8.x86_64 requires gdm-libs(x86-64), but none of the providers can be installed
  - package xorg-x11-server-Xwayland-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 15: package gdm-1:3.28.3-29.el8.x86_64 requires gnome-session-wayland-session, but none of the providers can be installed
  - package gnome-shell-3.32.2-14.el8.x86_64 requires gdm-libs(x86-64), but none of the providers can be installed
  - package gnome-session-wayland-session-3.28.1-8.el8.x86_64 requires xorg-x11-server-Xwayland(x86-64), but none of the providers can be installed
  - package chrome-gnome-shell-10.1-6.el8.x86_64 requires gnome-shell, but none of the providers can be installed
  - package xorg-x11-server-Xwayland-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 16: conflicting requests
  - package xorg-x11-drv-intel-2.99.917-38.20180618.el8.i686 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-intel-2.99.917-38.20180618.el8.i686 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-intel-2.99.917-38.20180618.el8.i686 requires xserver-abi(videodrv-24) >= 0, but none of the providers can be installed
  - package xorg-x11-drv-intel-2.99.917-38.20180618.el8.x86_64 requires Xorg, but none of the providers can be installed
  - package xorg-x11-drv-intel-2.99.917-38.20180618.el8.x86_64 requires xserver-abi(ansic-0) >= 4, but none of the providers can be installed
  - package xorg-x11-drv-intel-2.99.917-38.20180618.el8.x86_64 requires xserver-abi(videodrv-24) >= 0, but none of the providers can be installed
  - package xorg-x11-server-Xorg-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 17: package gnome-shell-3.32.2-14.el8.x86_64 requires gdm-libs(x86-64), but none of the providers can be installed
  - package gnome-shell-extension-common-3.32.1-10.el8.noarch requires gnome-shell >= 3.32.1, but none of the providers can be installed
  - package gdm-1:3.28.3-29.el8.x86_64 requires gnome-session-wayland-session, but none of the providers can be installed
  - package gnome-shell-extension-apps-menu-3.32.1-10.el8.noarch requires gnome-shell-extension-common = 3.32.1-10.el8, but none of the providers can be installed
  - package gnome-session-wayland-session-3.28.1-8.el8.x86_64 requires xorg-x11-server-Xwayland(x86-64), but none of the providers can be installed
  - package gnome-classic-session-3.32.1-10.el8.noarch requires gnome-shell-extension-apps-menu = 3.32.1-10.el8, but none of the providers can be installed
  - package xorg-x11-server-Xwayland-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - conflicting requests
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
 Problem 18: conflicting requests
  - package gdm-1:3.28.3-29.el8.i686 requires gnome-session-wayland-session, but none of the providers can be installed
  - package gdm-1:3.28.3-29.el8.x86_64 requires gnome-session-wayland-session, but none of the providers can be installed
  - package gnome-session-wayland-session-3.28.1-8.el8.x86_64 requires xorg-x11-server-Xwayland(x86-64), but none of the providers can be installed
  - package xorg-x11-server-Xwayland-1.20.6-3.el8.x86_64 requires xorg-x11-server-common >= 1.20.6-3.el8, but none of the providers can be installed
  - package xorg-x11-server-common-1.20.6-3.el8.x86_64 is filtered out by exclude filtering
@mildas mildas added the productization-issue Issue found in upstream stabilization process. label May 7, 2020
@matejak
Copy link
Member

matejak commented Jun 10, 2020 •
edited

Could be fixed by OpenSCAP/oscap-anaconda-addon#118

@matusmarhefka
Copy link
Member

Tested and I can confirm that OpenSCAP/oscap-anaconda-addon#118 fixes this issue, thanks @matejak

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
productization-issue Issue found in upstream stabilization process.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@matejak @matusmarhefka @mildas