| Summary: | RHEL-6 USGCB and STIG kickstarts: Switch on use of scap-security-guide RPM from base Red Hat Network channel rather than cloning most recent upstream Git repository content | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Marek Haicman <mhaicman> |
| Component: | scap-security-guide | Assignee: | Watson Yuuma Sato <wsato> |
| Status: | CLOSED ERRATA | QA Contact: | Marek Haicman <mhaicman> |
| Severity: | low | Docs Contact: | Mirek Jahoda <mjahoda> |
| Priority: | medium | ||
| Version: | 7.3 | CC: | jlieskov, ksrot, mhaicman, mpreisle, openscap-maint, redhatrises, swells |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | scap-security-guide-0.1.32-1.el7 | Doc Type: | Known Issue |
| Doc Text: |
_scap-security-guide_ example kickstart files for Red Hat Enterprise Linux 6 are not recommended for use
The Red Hat Enterprise Linux 6 example kickstart files, which are included in the _scap-security-guide_ package for Red Hat Enterprise Linux 7, install the latest version of the _scap-security-guide_ package directly from the upstream repository, which means that this version has not been checked by the Red Hat Quality Engineering team. To work around this problem, use the corrected Red Hat Enterprise Linux 6 example kickstart files from the _scap-security-guide_ package that is included in the current Red Hat Enterprise Linux 6 release, or alternatively, manually change the %post section in the kickstart file. Note that the Red Hat Enterprise Linux 7 example kickstart files are not affected by this problem.
|
Story Points: | --- |
| Clone Of: | 1251929 | Environment: | |
| Last Closed: | 2017-08-01 12:23:38 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Bug Depends On: | 1251929 | ||
| Bug Blocks: | |||
|
Description
Marek Haicman
2016-09-22 14:15:34 UTC
This should be fixed upstream. See https://github.com/OpenSCAP/scap-security-guide/pull/1581 Verified fix in version scap-security-guide-0.1.33-4.el7.noarch OLD (scap-security-guide-0.1.30-3.el7.noarch): :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: Test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ FAIL ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-pci-dss-with-gui-ks.cfg' should not contain 'git clone' :: [ FAIL ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-pci-dss-with-gui-ks.cfg' should contain '^scap-security-guide' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-pci-dss-with-gui-ks.cfg' should contain '^oscap xccdf eval --remediate' :: [ FAIL ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-stig-ks.cfg' should not contain 'git clone' :: [ FAIL ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-stig-ks.cfg' should contain '^scap-security-guide' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-stig-ks.cfg' should contain '^oscap xccdf eval --remediate' :: [ FAIL ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-usgcb-server-with-gui-ks.cfg' should not contain 'git clone' :: [ FAIL ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-usgcb-server-with-gui-ks.cfg' should contain '^scap-security-guide' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-usgcb-server-with-gui-ks.cfg' should contain '^oscap xccdf eval --remediate' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel7-ospp-ks.cfg' should not contain 'git clone' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel7-ospp-ks.cfg' should contain 'content-type = scap-security-guide' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel7-pci-dss-server-with-gui-oaa-ks.cfg' should not contain 'git clone' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel7-pci-dss-server-with-gui-oaa-ks.cfg' should contain 'content-type = scap-security-guide' :: [ LOG ] :: Duration: 1s :: [ LOG ] :: Assertions: 7 good, 6 bad :: [ FAIL ] :: RESULT: Test NEW: :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: Test :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-pci-dss-with-gui-ks.cfg' should not contain 'git clone' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-pci-dss-with-gui-ks.cfg' should contain '^scap-security-guide' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-pci-dss-with-gui-ks.cfg' should contain '^oscap xccdf eval --remediate' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-stig-ks.cfg' should not contain 'git clone' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-stig-ks.cfg' should contain '^scap-security-guide' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-stig-ks.cfg' should contain '^oscap xccdf eval --remediate' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-usgcb-server-with-gui-ks.cfg' should not contain 'git clone' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-usgcb-server-with-gui-ks.cfg' should contain '^scap-security-guide' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel6-usgcb-server-with-gui-ks.cfg' should contain '^oscap xccdf eval --remediate' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel7-ospp-ks.cfg' should not contain 'git clone' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel7-ospp-ks.cfg' should contain 'content-type = scap-security-guide' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel7-pci-dss-server-with-gui-oaa-ks.cfg' should not contain 'git clone' :: [ PASS ] :: File '/usr/share/scap-security-guide/kickstart/ssg-rhel7-pci-dss-server-with-gui-oaa-ks.cfg' should contain 'content-type = scap-security-guide' Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:2064 |