Certification862 problems· 22 reviewed

RHCSA

862 incident response problems that help with RHCSA prep.

All problems (862)

LINUX-1454A logrotate copytruncate looks successful and a shipper still duplicates linesDuplicate log shipping begins after a logrotate policy change even though rotation itself looks correct.LinuxIntermediate10 minProLINUX-1493A logrotate run completes and disk usage stays highDisk usage never falls after log rotation on a host where an app writes through a bind-mounted log path from a container.LinuxIntermediate10 minProLINUX-1466A netplan route metric looks right and the host still prefers the wrong uplinkA host starts preferring the backup uplink after moving from networkd to NetworkManager.LinuxIntermediate10 minProLINUX-1460A newly granted group still does not unlock accessA user gains access in the directory and one host continues denying it for a while.LinuxIntermediate10 minProLINUX-1393A package signing migration completes and one repo still warnsA package signing migration completes and one repo still warns focuses on runtime-configuration and asks the reader to isolate the key signal in ubuntu. Migration warnings can come from surrounding automation rather than from the package...LinuxIntermediate10 minProLINUX-1453A package update keeps the nftables rules and traffic still bypasses themBridge filtering stops working after a package refresh even though the expected rules are still in the config.LinuxIntermediate10 minProLINUX-1433A patch timer fails (systemd-environmentfile-missed-new-proxy-ca-bundle-path)A patch timer fails (the key signal) focuses on package-management and asks the reader to isolate the key signal in ubuntu. Automation often uses a smaller environment surface than the one admins...LinuxIntermediate10 minProLINUX-1497A podman quadlet service starts on login and not on bootUser-level Podman services start reliably after login and never from a cold reboot on hardened hosts.LinuxIntermediate10 minProLINUX-1527A quadlet service starts after login and not at bootUser-level Podman services never come up from cold reboot.LinuxIntermediate10 minProLINUX-1517A quadlet service starts after login and not on bootUser-level Podman services never come up from a cold reboot.LinuxIntermediate10 minProLINUX-1507A quadlet service starts on login and not on bootUser-level Podman services start reliably after login and never from cold boot.LinuxIntermediate10 minProLINUX-1478A rootless container survives reboot and still fails health checksA rootless service fails only after reboot while manual restarts later work fine.LinuxIntermediate10 minProLINUX-1442A rootless image pull fails after a mirror changePulls fail only for shorthand references after a registry mirror migration.LinuxIntermediate10 minProLINUX-1455A rootless Podman service runs manually and failsA rootless Podman service runs manually and fails focuses on Runner Hygiene and asks the reader to isolate the key signal in docker. Rootless services at boot often fail because session-scoped runtime paths vanish before the unit starts.LinuxIntermediate10 minProLINUX-1415A sudo command alias looks correct and a wrapper keeps failingA sudo command alias looks correct and a wrapper keeps failing focuses on privilege-boundary and asks the reader to isolate the key signal in ubuntu. Package relocations can break tightly scoped sudoers aliases even when the command name...LinuxIntermediate10 minProLINUX-1425A sudo rule allows a maintenance helper and automation still failsA sudo rule allows a maintenance helper and automation still fails focuses on privilege-boundary and asks the reader to isolate the key signal in ubuntu. Path relocations often break tight sudoers rules even when manual command names still...LinuxIntermediate10 minProLINUX-1405A sudo rule appears to allow a maintenance command and still denies executionA sudo rule appears to allow a maintenance command and still denies execution focuses on privilege-boundary and asks the reader to isolate the key signal in ubuntu. Wrapper scripts that use env can break tightly scoped sudo rules without...LinuxIntermediate10 minProLINUX-1435A sudo wrapper stops working (sudoers-alias-missed-libexec-relocation-through-wrapper)A sudo wrapper stops working (sudoers-alias-missed-libexec-relocation-through... focuses on privilege-boundary and asks the reader to isolate the key signal in ubuntu. Package relocations frequently break least-privilege sudo rules even...LinuxIntermediate10 minProLINUX-1445A sudoers include looks correct and one automation user loses rightsAn automation account loses one sudo capability after a package refresh.LinuxIntermediate10 minProLINUX-1395A sudoers rule looks correct and a command still prompts for a passwordAn automation wrapper is introduced and later a previously passwordless command begins prompting unexpectedly.LinuxIntermediate10 minPro