Description of problem:
If I generate tailoring file for only 1 rule Big file is
generated with all other rules marked selected="false"
This only happens in RHEL-7.
While in RHEL-6, I found very small tailoring file gets generated with
only rule specified.
There is an customer who has following requirement:
We need a small tailoring file as it needs to be embedded and written
out from the kickstart file.
I believe there is change in scap-workbench code b/w RHEL6,7.
How can we generate smaller tailoring file in RHEL7 as it happened in RHEL6?
Version-Release number of selected component (if applicable):
# rpm -qa | grep scap
# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 7.4 (Maipo)
Steps to Reproduce:
1. Generate a tailoring file using scap-workbench on RHEL7 with only 1 rule.
2. Generate a tailoring file using scap-workbench on RHEL6 with same rule.
3. You will find tailoring file generated on RHEL7 is much bigger although all rules are setted to false except 1 selected.
Bigger tailoring file generated with unwanted rules setted to false.
Smaller tailoring file should be generated.
I believe use case of generating bigger tailoring file having unwanted rules=false does not serve any purpose, Since it would lead to unneccesary checks in data-structure where rules are parsed and stored.
We need to iterate in table to search for 'true' entry consuming much of CPU cycles in comp instruction.
Would be going into scap-workbench code to look for fix, as i get time..
This issue was not selected to be included in Red Hat Enterprise Linux 7.7 because it is seen either as low or moderate impact to a small number of use-cases. The next release will be in Maintenance Support 1 Phase, which means that qualified Critical and Important Security errata advisories (RHSAs) and Urgent Priority Bug Fix errata advisories (RHBAs) may be released as they become available. We will now close this issue, but if you believe that it qualifies for the Maintenance Support 1 Phase, please re-open; otherwise, we recommend moving the request to Red Hat Enterprise Linux 8 if applicable.