Open swapdisk opened 2 months ago
Hi @swapdisk, thank you for reporting this unfortunate behavior. I created https://issues.redhat.com/browse/RHEL-40115 for better tracking within RH team. We will fix it in some future release (note it will be RHEL 8.10 and newer).
Actual behavior
The recently introduced actor
check_custom_modifications_actor
is reporting a "Detected custom leapp actors or files" high severity finding ifleapp-rhui-aws
package is installed. The finding summary lists files provides by theleapp-rhui-aws
package even though this is a legit Red Hat-signed package, i.e., not from third-party vendor, etc.To Reproduce
Steps to reproduce the behavior
On RHEL8 PAYG EC2 instance:
leapp-rhui-aws
leapp-upgrade-el8toel9-0.20.0-2.el8
or later versionleapp preupgrade --no-rhsm --debug
leapp-report.txt
, e.g.,Expected behavior
The finding should not be reported for leapp actors or files provided by a signed package supported by Red Hat.
System information (please complete the following information):
Attach (or provide link to) log files if applicable (optional - may contain confidential information):
# tar -czf leapp-logs.tar.gz /var/log/leapp /var/lib/leapp/leapp.db
leapp-logs.tar.gz
Additional context
The same issue exists with a RHEL7 PAYG EC2 instance.