Bug 1454455

Summary: tailoring saved from opened tailoring loses extends flag, and contains all rules and groups explicitly
Product: Red Hat Enterprise Linux 7 Reporter: Marek Haicman <mhaicman>
Component: scap-workbenchAssignee: Watson Yuuma Sato <wsato>
Status: CLOSED WONTFIX QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: medium    
Version: 7.4CC: mhaicman, openscap-maint
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-02-26 17:18:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
first tailoring
none
re-saved tailoring none

Description Marek Haicman 2017-05-22 19:43:09 UTC
Description of problem:
When saving tailoring created from fresh profile, it contains just small set of groups. After opening this tailoring, and saving again, new tailoring file contains much higher number of group states.

Both are effectively the same, but tailoring-xccdf is much bigger file.

Version-Release number of selected component (if applicable):
scap-workbench-1.1.4-4.el7.x86_64

How reproducible:
reliably

Steps to Reproduce:
1. create simple tailoring
2. save as customization only
3. open this customization
4. save it again

Actual results:
both customizations differ


Expected results:
both customizations are same, apart from timestamps

Additional info:

Comment 2 Marek Haicman 2017-05-22 19:43:41 UTC
Created attachment 1281186 [details]
first tailoring

Comment 3 Marek Haicman 2017-05-22 19:44:10 UTC
Created attachment 1281187 [details]
re-saved tailoring

Comment 4 Marek Haicman 2017-09-07 11:54:09 UTC
Please note that description does not mention rules and values, but all of that is added to the re-saved tailoring. It also loses extends attribute of the profile.

Comment 5 Watson Yuuma Sato 2018-11-30 12:42:17 UTC
Goal of the tailoring file is to be like a diff from the tailored profile, i.e. containing only the changes.

We should strive for idem-potency of the tailoring file, it should not change if no changes were made.

Comment 6 Marek Haicman 2019-02-26 17:18:48 UTC
This issue was not selected to be included in Red Hat Enterprise Linux 7.7 because it is seen either as low or moderate impact to a small number of use-cases. The next release will be in Maintenance Support 1 Phase, which means that qualified Critical and Important Security errata advisories (RHSAs) and Urgent Priority Bug Fix errata advisories (RHBAs) may be released as they become available. We will now close this issue, but if you believe that it qualifies for the Maintenance Support 1 Phase, please re-open; otherwise, we recommend moving the request to Red Hat Enterprise Linux 8 if applicable.