Bug 2015796

Summary: [RFE] RHV Manager should support running on a host with DISA STIG security profile applied
Product: Red Hat Enterprise Virtualization Manager Reporter: Martin Perina <mperina>
Component: ovirt-engineAssignee: Artur Socha <asocha>
Status: CLOSED ERRATA QA Contact: Guilherme Santos <gdeolive>
Severity: high Docs Contact:
Priority: high    
Version: 4.4.8CC: awestbro, cshao, emarcus, gdeolive, lleistne, lsvaty, michal.skrivanek, mkalinin, mtessun, pelauter
Target Milestone: ovirt-4.5.0-1Keywords: FutureFeature, ZStream
Target Release: 4.5.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ovirt-engine-4.5.0 Doc Type: Release Note
Doc Text:
Red Hat Virtualization Manager 4.4 SP1 is now capable of running on a host with the RHEL 8.6 DISA STIG OpenSCAP profile applied.
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-05-26 16:23:22 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Infra RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1902272, 2050071, 2055149, 2055860, 2089332    
Bug Blocks: 2072987    

Description Martin Perina 2021-10-20 06:32:36 UTC
RHV Manager should be able to properly run on a host (or a VM in case of hosted engine installation) where official DISA STIG profile for RHEL 8 is applied

https://www.redhat.com/en/blog/disa-has-released-red-hat-enterprise-linux-8-stig
http://static.open-scap.org/ssg-guides/ssg-rhel8-guide-stig.html
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems

Comment 1 Martin Perina 2021-10-20 06:42:41 UTC
The effort to make RHV hypervisor working with DISA STIG is tracked in BZ2015802

Comment 15 errata-xmlrpc 2022-05-26 16:23:22 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: RHV Manager (ovirt-engine) [ovirt-4.5.0] security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:4711