Bug 1674001

Summary:	Text Mode kickstart installation not fully supported by OSCAP anaconda addon
Product:	Red Hat Enterprise Linux 8	Reporter:	Gabriel Gaspar Becker <ggasparb>
Component:	oscap-anaconda-addon	Assignee:	Matěj Týč <matyc>
Status:	CLOSED ERRATA	QA Contact:	Release Test Team <release-test-team-automation>
Severity:	high	Docs Contact:	Mirek Jahoda <mjahoda>
Priority:	medium
Version:	8.0	CC:	alexandre.chanu, amepatil, byodlows, hasuzuki, jcerny, jjaburek, jstodola, matyc, mhaicman, mjahoda, mlewando, mmatsuya, openscap-maint, rmetrich, wsato
Target Milestone:	rc	Keywords:	Reopened, TestCaseNeeded, Triaged
Target Release:	8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	oscap-anaconda-addon-1.2.0-1.el8	Doc Type:	Bug Fix
Doc Text:	.`OSCAP Anaconda Addon` now installs all selected packages in text mode Previously, the `OSCAP Anaconda Addon` plugin did not evaluate rules that required certain partition layout or package installations and removals before the installation started when running in text mode. Consequently, when a security policy profile was specified using Kickstart and the installation was running in text mode, any additional packages required by a selected security profile were not installed. `OSCAP Anaconda Addon` now performs the required checks before the installation starts regardless of whether the installation is graphical or text-based, and all selected packages are installed also in text mode.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-11-09 18:50:43 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1682523
Bug Blocks:	1890480

Description Gabriel Gaspar Becker 2019-02-08 17:04:15 UTC

Description of problem:
Installing RHEL using kickstart file which selects one security profile (eg: ospp) thus requiring packages to be installed (tmux), these packages are not being added properly to the kickstart file during package rules evaluation.


Version-Release number of selected component (if applicable):
oscap-anaconda-addon-1.0-7.el8.noarch
scap-security-guide-0.1.42-8.el8.noarch

How reproducible:
100%

Steps to Reproduce:
1. Start installation using ssg-rhel8-ospp-ks.cfg kickstart file (found scap-security-guide package)
2. After installation finishes, check /root/anaconda-ks.cfg file
3.

Actual results:
section %package does NOT contains tmux package


Expected results:
section %package contains tmux package


Additional info:

Comment 1 Gabriel Gaspar Becker 2019-02-11 16:16:48 UTC


*** This bug has been marked as a duplicate of bug 1547609 ***

Comment 18 Matěj Týč 2021-08-04 15:51:40 UTC

*** Bug 1895138 has been marked as a duplicate of this bug. ***

Comment 19 Matěj Týč 2021-08-04 15:52:13 UTC

*** Bug 1924058 has been marked as a duplicate of this bug. ***

Comment 20 Jan Stodola 2021-08-05 13:42:42 UTC

Mirku, the doc text for this bug should be updated, since this will not be a know issue, but a bug fix in RHEL-8.5. Can you please update the doc type/text?

Once the documentation is corrected, the bug can be moved to VERIFIED, oscap-anaconda-addon-1.2.0-2.el8 is present in RHEL-8.5.0-20210730.n.0.

Comment 21 Matěj Týč 2021-08-05 14:37:20 UTC

I have updated the doc text, but it will certainly need doc team's attention.

Comment 22 Jan Stodola 2021-08-17 11:38:16 UTC

The proposed doc text looks good to me.

oscap-anaconda-addon-1.2.1-2.el8 is present in RHEL-8.5.0-20210816.n.0, moving to VERIFIED.

Comment 25 errata-xmlrpc 2021-11-09 18:50:43 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (oscap-anaconda-addon bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4312