Bug 1419693
Summary: | Detected issue with RHEL 7.3 install /etc/pam.d/system-auth link broken using DISA security policy | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Hemant B Khot <hkhot> |
Component: | scap-security-guide | Assignee: | Watson Yuuma Sato <wsato> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | BaseOS QE Security Team <qe-baseos-security> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 7.3 | CC: | cww, hkhot, jstodola, mhaicman, openscap-maint |
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2017-11-29 21:59:13 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 1420851 |
Description
Hemant B Khot
2017-02-06 18:57:09 UTC
I am sorry but pam package is not the appropriate component to report bugs against for the DISA security policy settings/installer. This needs to be fixed in the DISA installer - I have no idea which component that is. Also just FYI - when there are both system-auth and system-auth-ac as regular files then the system-auth is used. The system-auth-ac contents is irrelevant. This looks like oscap-anaconda-addon. Let's see if they have any input on this issue. Hello, most likely culprit in this case is scap-security-guide, which provides remediation scripts utilized to harden the system. I have just tried described scenario for RHEL 7.4 installation and links are preserved. So if you don't mind, I will assume it's fixed, thus closing this issue. If you need it for RHEL 7.3 installation, you can still use datastream from network - use one from scap-security-guide-0.1.33-5.el7 Feel free to reopen if your mileage varies. |