Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation

  • Comments
  • unconfined_service

    Posted on

    Hi Team,

    While doing Nessus scan in one the host we see most the DB services are showing as (unconfined_service_t) as below along with other service. What is the reason for this and is there anyway we can remediate these. Is there any harm if it is run as "unconfined_service_t". Please help me to understand.

    [root@localhost ~]# ps -eZ | grep unconfined_service_t
    system_u:system_r:unconfined_service_t:s0 1153264 ? 00:12:43 beam.smp
    system_u:system_r:unconfined_service_t:s0 1153302 ? 00:00:00 erl_child_setup
    system_u:system_r:unconfined_service_t:s0 1153348 ? 00:00:11 gosecrets
    system_u:system_r:unconfined_service_t:s0 1153353 ? 07:09:36 beam.smp
    system_u:system_r:unconfined_service_t:s0 1153378 ? 00:00:00 erl_child_setup
    system_u:system_r:unconfined_service_t:s0 1154335 ? 00:22:41 beam.smp
    system_u:system_r:unconfined_service_t:s0 1154344 ? 00:00:00 erl_child_setup
    system_u:system_r:unconfined_service_t:s0 1154398 ? 00:00:01 goport
    system_u:system_r:unconfined_service_t:s0 1154402 ? 00:55:42 prometheus
    system_u:system_r:unconfined_service_t:s0 1154414 ? 00:02:37 goport
    system_u:system_r:unconfined_service_t:s0 1154419 ? 00:26:37 goxdcr
    system_u:system_r:unconfined_service_t:s0 1155676 ? 00:02:30 goport
    system_u:system_r:unconfined_service_t:s0 1155681 ? 01:40:34 indexer
    system_u:system_r:unconfined_service_t:s0 1155696 ? 00:00:50 goport
    system_u:system_r:unconfined_service_t:s0 1155701 ? 00:43:24 cbq-engine

    Thanks,
    Debasis

    by

    points

    Responses

    Red Hat

    Quick Links

    Help

    Site Info

    Related Sites

    © 2025 Red Hat, Inc.