oscap-anaconda-addon was changed to read the datastream file based on the OS name and version. Consequently, the addon looks for a datastream file named "ssg-rhvh4-ds.xml," which does not exist, so no OSCAP profiles are shown. The relevant OSCAP profiles for RHVH reside in ssg-rhel7-ds.xml, so a symlink was added named ssg-rhvh4-ds.xml that references ssg-rhel7-ds.xml.
Created attachment 1488316[details]
security policy page screenshot
Description of problem:
Install RHVH-4.2-20180919.3-RHVH-x86_64-dvd1.iso, there is no SCAP security guide on Anaconda security policy page.
No such issue with RHEL 7.6
Version-Release number of selected component (if applicable):
RHVH-4.2-20180919.3-RHVH-x86_64-dvd1.iso
How reproducible:
100%
Steps to Reproduce:
1.Install RHVH-4.2-20180919.3-RHVH-x86_64-dvd1.iso, open SECURITY POLICY page on Anaconda
Actual results:
There is no SCAP security guide.
Expected results:
SCAP security guide should be present when the security policy page is opened.
Additional info:
Looks like oscap-anaconda-addon has changed to search for its content according to the productName - it used to search for:
"/usr/share/xml/scap/ssg/content/ssg-rhel%s-ds.xml" % productVersion... which expands to ssg-rhel7-ds.xml and is available from scap-security-guide.
and now it searches for:
"/usr/share/xml/scap/ssg/content/ssg-%s%s-ds.xml" % (productName, productVersion..") which expands in RHVH to ssg-RHVH4-ds.xml and this doesn't exist in scap-security-guide.
This bugzilla is included in oVirt 4.3.0 release, published on February 4th 2019.
Since the problem described in this bug report should be
resolved in oVirt 4.3.0 release, it has been closed with a resolution of CURRENT RELEASE.
If the solution does not work for you, please open a new bug report.
Created attachment 1488316 [details] security policy page screenshot Description of problem: Install RHVH-4.2-20180919.3-RHVH-x86_64-dvd1.iso, there is no SCAP security guide on Anaconda security policy page. No such issue with RHEL 7.6 Version-Release number of selected component (if applicable): RHVH-4.2-20180919.3-RHVH-x86_64-dvd1.iso How reproducible: 100% Steps to Reproduce: 1.Install RHVH-4.2-20180919.3-RHVH-x86_64-dvd1.iso, open SECURITY POLICY page on Anaconda Actual results: There is no SCAP security guide. Expected results: SCAP security guide should be present when the security policy page is opened. Additional info: