Bug 1372063
| Summary: | RHEL 7.3 beta error: net.ipv6.conf.all.accept_source_route not configured | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Shawn Wells <swells> |
| Component: | scap-security-guide | Assignee: | Watson Yuuma Sato <wsato> |
| Status: | CLOSED ERRATA | QA Contact: | Matus Marhefka <mmarhefk> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.3 | CC: | lmiksik, mhaicman, mmarhefk, mpreisle, openscap-maint, wsato |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | scap-security-guide-0.1.32-1.el7 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-08-01 12:23:38 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Shawn Wells
2016-08-31 20:00:36 UTC
Note this has been fixed upstream via: https://github.com/OpenSCAP/scap-security-guide/pull/1393 Proposing improvement of remediation script to use 'replace_or_append' function in PR: https://github.com/OpenSCAP/scap-security-guide/pull/1761 Verified for version scap-security-guide-0.1.33-5.el7.noarch Verification performed using SSG Test Suite https://github.com/OpenSCAP/scap-security-guide/commits/ba02d65857f02c824e18878e238ff8a9aea657c1 OLD: scap-security-guide-0.1.30-3.el7.noarch INFO - xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_source_route INFO - Script comment.fail.sh using profile xccdf_org.ssgproject.content_profile_stig-rhel7-server-upstream ERROR - Scan has exited with return code 2, instead of expected 0 during stage remediation ERROR - Rule result should have been "fixed", but is "fail"! INFO - Script correct_value.pass.sh using profile xccdf_org.ssgproject.content_profile_stig-rhel7-server-upstream INFO - Script line_not_there.fail.sh using profile xccdf_org.ssgproject.content_profile_stig-rhel7-server-upstream ERROR - Scan has exited with return code 2, instead of expected 0 during stage remediation ERROR - Rule result should have been "fixed", but is "fail"! INFO - Script wrong_value.fail.sh using profile xccdf_org.ssgproject.content_profile_stig-rhel7-server-upstream ERROR - Scan has exited with return code 2, instead of expected 0 during stage remediation ERROR - Rule result should have been "fixed", but is "fail"! INFO - All snapshots reverted successfully NEW: INFO - xccdf_org.ssgproject.content_rule_sysctl_net_ipv6_conf_all_accept_source_route INFO - Script comment.fail.sh using profile xccdf_org.ssgproject.content_profile_ospp-rhel7 INFO - Script line_not_there.fail.sh using profile xccdf_org.ssgproject.content_profile_ospp-rhel7 INFO - Script wrong_value.fail.sh using profile xccdf_org.ssgproject.content_profile_ospp-rhel7 INFO - Script correct_value.pass.sh using profile xccdf_org.ssgproject.content_profile_ospp-rhel7 INFO - All snapshots reverted successfully Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:2064 |