Bug 1731501

Summary: [RFE] add possibility to check sum of loaded module
Product: Red Hat Enterprise Linux 8 Reporter: Filip Krska <fkrska>
Component: policycoreutilsAssignee: Petr Lautrbach <plautrba>
Status: NEW --- QA Contact: Milos Malik <mmalik>
Severity: medium Docs Contact:
Priority: medium    
Version: 8.4CC: batkisso, dwalsh, lvrabec, mmalik, plautrba, ssekidde, vmojzis
Target Milestone: rcKeywords: FutureFeature, Triaged
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Filip Krska 2019-07-19 14:41:05 UTC
Description of problem:

1. Proposed title of this feature request

[RFE] add possibility to check sum of loaded module

2. Who is the customer behind the request?

Account: RED HAT IT/IS 5243891
TAM customer: yes
CSM customer: yes
Strategic: yes

3. What is the nature and description of the request?

Use case:

Ansible loads a module. If I then need to make changes to 
this policy in the future, how can Ansible compare the .pp file in 
config management with the state loaded on the system?

Need some mechanism to compare loaded module with definition of the module we expect to be running.

4. Why does the customer need this? (List the business requirements here)

Having Ansible reload the module every run will cause problems in real operations.

5. How would the customer like to achieve this? (List the functional requirements here)

Introduce st like `semodule -l --checksum` that could be compared with the module definition.

6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented.

7. Is there already an existing RFE upstream or in Red Hat Bugzilla?

No

8. Does the customer have any specific timeline dependencies and which release would they like to target (i.e. RHEL5, RHEL6)?

9. Is the sales team involved in this request and do they have any additional input?

10. List any affected packages or components.

11. Would the customer be able to assist in testing this functionality if implemented?

Yes