Bug 1829265

Summary: [RFE] [RHV] Missing audispd-plugins package which required for sending logs to remote log server
Product: Red Hat Enterprise Virtualization Manager Reporter: Abhishekh Patil <abpatil>
Component: ovirt-hostAssignee: Nir Levy <nlevy>
Status: CLOSED DUPLICATE QA Contact: cshao <cshao>
Severity: medium Docs Contact:
Priority: low    
Version: 4.3.8CC: cshao, lsvaty, mavital, michal.skrivanek, mkalinin, mtessun, nlevy, peyu, qiyuan, sbonazzo, shlei, weiwang, yaniwang, yturgema
Target Milestone: ovirt-4.4.1Keywords: FutureFeature
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-06-15 09:39:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Node RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Abhishekh Patil 2020-04-29 10:18:28 UTC
Description of problem:

For sending audit logs to a remote server from RHVH host, it needs the package audispd-plugins which is missing with RHVH repository.


Version-Release number of selected component (if applicable):
RHVH-4.3.8

How reproducible:
[100%]

Steps to Reproduce:
1. Install RHVH hypervisor
2. It does not have 'audispd-plugins' package installed

Actual results:
Missing package 'audispd-plugins'

Expected results:
Installation of RHVH should install 'audispd-plugins' package.

Comment 2 Marina Kalinin 2020-05-01 20:07:44 UTC
Hi Abhishek,

Thank you for filing this request.
Few comments.
1. Can you please be more specific about the procedure that requires this package? Can you ask the customer to list the exact steps and what exactly requires this package.
2. Wondering if this is actually an RFE and not a bug. But after you answer #1, we will probably be able to decide on this.


P.S. related BZ#1824117.

Comment 3 Abhishekh Patil 2020-05-04 01:08:21 UTC
(In reply to Marina Kalinin from comment #2)
> Hi Abhishek,
> 
> Thank you for filing this request.
> Few comments.
> 1. Can you please be more specific about the procedure that requires this
> package? Can you ask the customer to list the exact steps and what exactly
> requires this package.
> 2. Wondering if this is actually an RFE and not a bug. But after you answer
> #1, we will probably be able to decide on this.
> 
> 
> P.S. related BZ#1824117.

In order to send logs from RHV hypervisor to audit log server, hypervisor(can be called as audit client) should have 'audispd-plugins' installed on it. Then https://access.redhat.com/solutions/28676 can be followed to configure the client.

Comment 4 Sandro Bonazzola 2020-05-28 09:47:14 UTC
Let's add the dependency to ovirt-host.

Comment 5 Sandro Bonazzola 2020-06-15 09:39:16 UTC
It sorted out  audispd-plugins is needed by DISA-STIG, handled by bug #1836026.
Closing this as duplicate.

*** This bug has been marked as a duplicate of bug 1836026 ***