Red Hat Bugzilla – Bug 1313223
Supply mountpoint remediations for anaconda
Last modified: 2017-11-16 10:07:49 EST
Description of problem:
Scap-security-guide should provide remediation scripts for oscap-anaconda-addon.
For example STIG has specific rules for partitioning, however SSG is missing (anaconda) fixes for these rules. As a result anaconda-cannot advise user to amend his or her partitioning scheme. (See https://bugzilla.redhat.com/show_bug.cgi?id=1311230)
For more information about anaconda fixes see http://www.open-scap.org/tools/oscap-anaconda-addon/doc/
Support for Anaconda remediation scripts was added upstream in https://github.com/OpenSCAP/scap-security-guide/pull/1575
The situation has improved but we don't have anaconda remediations for all rules in profile.