Bug 1836026
Summary: | Add pkgs required by STIG | ||
---|---|---|---|
Product: | Red Hat Enterprise Virtualization Manager | Reporter: | Qin Yuan <qiyuan> |
Component: | ovirt-host | Assignee: | Nir Levy <nlevy> |
Status: | CLOSED ERRATA | QA Contact: | Qin Yuan <qiyuan> |
Severity: | high | Docs Contact: | |
Priority: | high | ||
Version: | 4.4.0 | CC: | abpatil, cshao, lsvaty, mavital, nlevy, pelauter, peyu, qiyuan, ralford, sbonazzo, shlei, weiwang, wsato, yaniwang |
Target Milestone: | ovirt-4.4.1 | ||
Target Release: | 4.4.1 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | ovirt-host-4.4.1-4 | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2020-08-04 16:22:45 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | Node | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Qin Yuan
2020-05-15 00:23:41 UTC
pcsc-lite, opensc are smart card related. wsato can we avoid to require them in STIG profile for RHV-H? (In reply to Sandro Bonazzola from comment #1) > pcsc-lite, opensc are smart card related. wsato can we avoid to require them > in STIG profile for RHV-H? Technically yes. But at the requirement level Gabe Alford is the one who should answer. Since we are trying to create a STIG that we can submit to DISA, according to SRG-OS-000376-VMM-001520 smart card credentials are required for login. However if Gnome gets installed by one of these packages, we should fix that. Adding the 3 packages changed the content of the image by: Install 685 Packages -> 690 Packages Total size: 403 M -> 405 M So nothing against including the packages. *** Bug 1829265 has been marked as a duplicate of this bug. *** Verified with: RHVH-4.4-20200618.0-RHVH-x86_64-dvd1.iso Steps: 1. Install RHVH, and select stig security profile 2. Check if required pkgs are installed Results: 1. audispd-plugins, pcsc-lite, and opensc are all installed, the versions are: audispd-plugins-3.0-0.17.20191104git1c2f876.el8.x86_64 pcsc-lite-1.8.23-3.el8.x86_64 opensc-0.19.0-7.el8.x86_64 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (RHV Host (redhat-virtualization-host) 4.4), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2020:3316 |