Description of problem:

When applying the xccdf_org.ssgproject.content_profile_ospp profile during installation through using a kickstart, the user/admin cannot log in anymore after installation in case "tmux" package is not installed, as shown with the following kickstart excerpt below:

-------- 8< ---------------- 8< ---------------- 8< ---------------- 8< --------
%packages
@Base
kexec-tools
bash-completion
vim
%end

%addon org_fedora_oscap
    content-type = scap-security-guide
    profile = xccdf_org.ssgproject.content_profile_ospp
%end
-------- 8< ---------------- 8< ---------------- 8< ---------------- 8< --------

This ends up having 3 additional packages installed:
-------- 8< ---------------- 8< ---------------- 8< ---------------- 8< --------
openscap
openscap-scanner
scap-security-guide
-------- 8< ---------------- 8< ---------------- 8< ---------------- 8< --------

But not "tmux" package which is required due to having the following code applied in /etc/bashrc:
-------- 8< ---------------- 8< ---------------- 8< ---------------- 8< --------
if [ "$PS1" ]; then
  parent=$(ps -o ppid= -p $$)
  name=$(ps -o comm= -p $parent)
  case "$name" in sshd|login) exec tmux ;; esac
fi
-------- 8< ---------------- 8< ---------------- 8< ---------------- 8< --------

Hence, either "tmux" should be automatically selected or the above code should be hardened in order to not blindly execute "tmux", even when it is not installed.


Version-Release number of selected component (if applicable):

anaconda-33.16.3.26-1.el8


How reproducible:

Always, see above.