Description wanqian 2024-04-22 14:50:06 UTC

[问题简述]
6.6.25-2_rc1.an23 security-benchmark测试5.5-ensure-no-unconfined-services-exist.sh 存在unconfined服务


[复验步骤]：
 git clone https://gitee.com/anolis/security-benchmark.git
 cd security-benchmark/scanners/mandatory-access-control
bash -x 5.5-ensure-no-unconfined-services-exist.sh

[期望结果]
case pass

[实际结果]

[root@iZbp1c9jzchxjqive233udZ mandatory-access-control]# bash -x 5.5-ensure-no-unconfined-services-exist.sh
++ ps -eZ
++ grep unconfined_service_t
+ result='system_u:system_r:unconfined_service_t:s0 587 ?  00:00:28 assist_daemon
system_u:system_r:unconfined_service_t:s0 588 ?  00:00:00 CmsGoAgent.linu
system_u:system_r:unconfined_service_t:s0 642 ?  00:04:49 exe
system_u:system_r:unconfined_service_t:s0 669 ?  00:00:00 keentuned
system_u:system_r:unconfined_service_t:s0 705 ?  00:00:00 keentune-target
system_u:system_r:unconfined_service_t:s0 875 ?  00:01:37 aliyun-service
system_u:system_r:unconfined_service_t:s0 3866 ? 00:04:18 AliYunDun
system_u:system_r:unconfined_service_t:s0 3877 ? 00:17:46 AliYunDunMonito
system_u:system_r:unconfined_service_t:s0 457349 ? 00:00:37 AliYunDunUpdate'
+ [[ system_u:system_r:unconfined_service_t:s0 587 ?  00:00:28 assist_daemon
system_u:system_r:unconfined_service_t:s0 588 ?  00:00:00 CmsGoAgent.linu
system_u:system_r:unconfined_service_t:s0 642 ?  00:04:49 exe
system_u:system_r:unconfined_service_t:s0 669 ?  00:00:00 keentuned
system_u:system_r:unconfined_service_t:s0 705 ?  00:00:00 keentune-target
system_u:system_r:unconfined_service_t:s0 875 ?  00:01:37 aliyun-service
system_u:system_r:unconfined_service_t:s0 3866 ? 00:04:18 AliYunDun
system_u:system_r:unconfined_service_t:s0 3877 ? 00:17:46 AliYunDunMonito
system_u:system_r:unconfined_service_t:s0 457349 ? 00:00:37 AliYunDunUpdate == '' ]]
+ echo fail
fail

[root@iZbp1c9jzchxjqive233udZ mandatory-access-control]# ps -eZ | grep unconfined_service_t
system_u:system_r:unconfined_service_t:s0 587 ?  00:00:28 assist_daemon
system_u:system_r:unconfined_service_t:s0 588 ?  00:00:00 CmsGoAgent.linu
system_u:system_r:unconfined_service_t:s0 642 ?  00:04:49 exe
system_u:system_r:unconfined_service_t:s0 669 ?  00:00:00 keentuned
system_u:system_r:unconfined_service_t:s0 705 ?  00:00:00 keentune-target
system_u:system_r:unconfined_service_t:s0 875 ?  00:01:37 aliyun-service
system_u:system_r:unconfined_service_t:s0 3866 ? 00:04:18 AliYunDun
system_u:system_r:unconfined_service_t:s0 3877 ? 00:17:46 AliYunDunMonito
system_u:system_r:unconfined_service_t:s0 457349 ? 00:00:37 AliYunDunUpdate


[测试环境]

[root@iZbp143ti4ccpaufkzata3Z build]# uname -r ; python -V
6.6.25-2_rc1.an23.aarch64
Python 3.10.13

[root@iZbp1c9jzchxjqive233udZ system-configurations]# cat /etc/os-release
NAME="Anolis OS"
VERSION="23"
ID="anolis"
VERSION_ID="23"
PLATFORM_ID="platform:an23"
PRETTY_NAME="Anolis OS 23"
ANSI_COLOR="0;31"
HOME_URL="https://openanolis.cn/"
BUG_REPORT_URL="https://bugzilla.openanolis.cn/"


[出现频率]
必现

[原因分析]：