Back to bug 2075508

Who When What Removed Added
Red Hat Bugzilla 2022-04-14 11:51:53 UTC Pool ID sst_security_compliance_rhel_8
RHEL Program Management 2022-04-14 11:51:59 UTC Keywords FutureFeature
Red Hat One Jira (issues.redhat.com) 2022-04-14 11:59:03 UTC Link ID Red Hat Issue Tracker RHELPLAN-118977
Martin Perina 2022-04-14 12:37:39 UTC CC mperina
RHEL Program Management 2022-04-21 09:51:03 UTC Flags needinfo?(matyc)
CC matyc
Watson Yuuma Sato 2022-04-21 15:34:57 UTC Assignee matyc wsato
Watson Yuuma Sato 2022-04-22 12:48:34 UTC Keywords Triaged
Watson Yuuma Sato 2022-04-22 15:19:54 UTC Flags needinfo?(matyc)
Watson Yuuma Sato 2022-04-22 15:24:08 UTC Flags needinfo?(mhaicman)
Watson Yuuma Sato 2022-04-22 17:24:20 UTC Flags needinfo?(amusil)
Ales Musil 2022-04-25 05:10:06 UTC Flags needinfo?(amusil)
Matěj Týč 2022-04-25 13:14:00 UTC Doc Type If docs needed, set a value Known Issue
Watson Yuuma Sato 2022-04-26 09:08:16 UTC Doc Text If this bug requires documentation, please select an appropriate Doc Type value.
Marek Haicman 2022-04-26 13:29:45 UTC Flags needinfo?(mhaicman)
Gabi Fialová 2022-05-02 10:48:31 UTC Docs Contact mjahoda
Mirek Jahoda 2022-05-05 05:56:27 UTC Docs Contact mjahoda kborole
Khushbu Borole 2022-05-06 08:12:38 UTC Flags needinfo?(wsato)
Watson Yuuma Sato 2022-05-18 08:57:10 UTC Flags needinfo?(wsato)
Watson Yuuma Sato 2022-05-19 12:28:51 UTC CC kborole
Flags needinfo?(kborole)
Doc Text If this bug requires documentation, please select an appropriate Doc Type value. Cause:
The hardening plugin Oscap Anaconda Addon doesn't recognize the applicability platforms defined in the security content and will not honour them.

Consequence:
A hardened installation of RHV-H with RHEL8 STIG Profile may result in a non-working hypervisor.

Workaround (if any):
Install the RHV-H system without applying any profile hardening and apply the profile after installation is concluded using OpenSCAP.

Result:
Watson Yuuma Sato 2022-05-23 13:06:13 UTC Doc Text Cause:
The hardening plugin Oscap Anaconda Addon doesn't recognize the applicability platforms defined in the security content and will not honour them.

Consequence:
A hardened installation of RHV-H with RHEL8 STIG Profile may result in a non-working hypervisor.

Workaround (if any):
Install the RHV-H system without applying any profile hardening and apply the profile after installation is concluded using OpenSCAP.

Result:
Cause:
In some cases, while installing RVH-H and applying the RHEL8 STIG profile, the security content will treat the system being installed as a Red Hat Enterprise Linux, not as a Red Hat Virtualization Hypervisor, this may result in essential packages for RHV-H being removed.

Consequence:
A hardened installation of RHV-H with RHEL8 STIG Profile may result in a non-working hypervisor.

Workaround (if any):
Install the RHV-H system without applying any profile hardening and apply the profile after installation is concluded using OpenSCAP.

Result:
Khushbu Borole 2022-05-24 11:15:30 UTC Doc Text Cause:
In some cases, while installing RVH-H and applying the RHEL8 STIG profile, the security content will treat the system being installed as a Red Hat Enterprise Linux, not as a Red Hat Virtualization Hypervisor, this may result in essential packages for RHV-H being removed.

Consequence:
A hardened installation of RHV-H with RHEL8 STIG Profile may result in a non-working hypervisor.

Workaround (if any):
Install the RHV-H system without applying any profile hardening and apply the profile after installation is concluded using OpenSCAP.

Result:
.RHV hypervisor does not work correctly when hardening the system during installation

When installing Red Hat Virtualization Hypervisor (RHV-H) and applying the Red Hat Enterprise Linux 8 STIG profile, OSCAP-Anaconda-Addon hardens the system as RHEL instead of RVH-H and removes essential packages for RHV-H. Consequently, the RHV hypervisor does not work. To work around the problem, install the RHV-H system without applying any profile hardening, and after the installation is complete apply the profile by using OpenSCAP. As a result, the RHV hypervisor will work correctly.
Flags needinfo?(kborole)
Khushbu Borole 2022-05-24 12:08:57 UTC Doc Text .RHV hypervisor does not work correctly when hardening the system during installation

When installing Red Hat Virtualization Hypervisor (RHV-H) and applying the Red Hat Enterprise Linux 8 STIG profile, OSCAP-Anaconda-Addon hardens the system as RHEL instead of RVH-H and removes essential packages for RHV-H. Consequently, the RHV hypervisor does not work. To work around the problem, install the RHV-H system without applying any profile hardening, and after the installation is complete apply the profile by using OpenSCAP. As a result, the RHV hypervisor will work correctly.
.RHV hypervisor does not work correctly when hardening the system during installation

When installing Red Hat Virtualization Hypervisor (RHV-H) and applying the Red Hat Enterprise Linux 8 STIG profile, OSCAP Anaconda Addon hardens the system as RHEL instead of RVH-H and removes essential packages for RHV-H. Consequently, the RHV hypervisor does not work. To work around the problem, install the RHV-H system without applying any profile hardening, and after the installation is complete, apply the profile by using OpenSCAP. As a result, the RHV hypervisor works correctly.
Khushbu Borole 2022-05-24 12:54:07 UTC Doc Text .RHV hypervisor does not work correctly when hardening the system during installation

When installing Red Hat Virtualization Hypervisor (RHV-H) and applying the Red Hat Enterprise Linux 8 STIG profile, OSCAP Anaconda Addon hardens the system as RHEL instead of RVH-H and removes essential packages for RHV-H. Consequently, the RHV hypervisor does not work. To work around the problem, install the RHV-H system without applying any profile hardening, and after the installation is complete, apply the profile by using OpenSCAP. As a result, the RHV hypervisor works correctly.
.RHV hypervisor does not work correctly when hardening the system during installation

When installing Red Hat Virtualization Hypervisor (RHV-H) and applying the Red Hat Enterprise Linux 8 STIG profile, OSCAP-Anaconda-Addon hardens the system as RHEL instead of RVH-H and removes essential packages for RHV-H. Consequently, the RHV hypervisor does not work. To work around the problem, install the RHV-H system without applying any profile hardening, and after the installation is complete, apply the profile by using OpenSCAP. As a result, the RHV hypervisor works correctly.
Gabi Fialová 2022-05-24 13:30:22 UTC CC gfialova
Khushbu Borole 2022-05-25 04:41:38 UTC Doc Text .RHV hypervisor does not work correctly when hardening the system during installation

When installing Red Hat Virtualization Hypervisor (RHV-H) and applying the Red Hat Enterprise Linux 8 STIG profile, OSCAP-Anaconda-Addon hardens the system as RHEL instead of RVH-H and removes essential packages for RHV-H. Consequently, the RHV hypervisor does not work. To work around the problem, install the RHV-H system without applying any profile hardening, and after the installation is complete, apply the profile by using OpenSCAP. As a result, the RHV hypervisor works correctly.
.RHV hypervisor does not work correctly when hardening the system during installation

When installing Red Hat Virtualization Hypervisor (RHV-H) and applying the Red Hat Enterprise Linux 8 STIG profile, OSCAP Anaconda Add-on hardens the system as RHEL instead of RVH-H and removes essential packages for RHV-H. Consequently, the RHV hypervisor does not work. To work around the problem, install the RHV-H system without applying any profile hardening, and after the installation is complete, apply the profile by using OpenSCAP. As a result, the RHV hypervisor works correctly.
Matěj Týč 2022-06-14 09:58:36 UTC Flags needinfo?(kborole)
Khushbu Borole 2022-06-21 09:43:32 UTC Flags needinfo?(kborole)
Doc Text .RHV hypervisor does not work correctly when hardening the system during installation

When installing Red Hat Virtualization Hypervisor (RHV-H) and applying the Red Hat Enterprise Linux 8 STIG profile, OSCAP Anaconda Add-on hardens the system as RHEL instead of RVH-H and removes essential packages for RHV-H. Consequently, the RHV hypervisor does not work. To work around the problem, install the RHV-H system without applying any profile hardening, and after the installation is complete, apply the profile by using OpenSCAP. As a result, the RHV hypervisor works correctly.
.RHV hypervisor may not work correctly when hardening the system during installation

When installing Red Hat Virtualization Hypervisor (RHV-H) and applying the Red Hat Enterprise Linux 8 STIG profile, OSCAP Anaconda Add-on may harden the system as RHEL instead of RVH-H and remove essential packages for RHV-H. Consequently, the RHV hypervisor may not work. To work around the problem, install the RHV-H system without applying any profile hardening, and after the installation is complete, apply the profile by using OpenSCAP. As a result, the RHV hypervisor works correctly.
Gabi Fialová 2022-07-26 13:47:06 UTC CC gfialova
Red Hat Bugzilla 2022-08-19 19:03:05 UTC CC kborole
Docs Contact kborole
Lucie Vařáková 2022-09-02 12:19:05 UTC Docs Contact mjahoda
Lucie Vařáková 2023-01-16 13:14:48 UTC CC lmanasko, mjahoda
Flags needinfo?(mjahoda)
Mirek Jahoda 2023-02-16 16:26:58 UTC Flags needinfo?(mjahoda)
Marek Haicman 2023-07-03 12:29:17 UTC Assignee wsato matyc

Back to bug 2075508