Bug 1953513
| Summary: | The instructions are missing for some rules those report status ‘MANUAL’ | |||
|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Jakub Hrozek <jhrozek> | |
| Component: | Compliance Operator | Assignee: | Jakub Hrozek <jhrozek> | |
| Status: | CLOSED ERRATA | QA Contact: | xiyuan | |
| Severity: | medium | Docs Contact: | ||
| Priority: | medium | |||
| Version: | 4.7 | CC: | josorior, mrogers, pdhamdhe, xiyuan | |
| Target Milestone: | --- | |||
| Target Release: | 4.7.z | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | ||
| Doc Text: | Story Points: | --- | ||
| Clone Of: | 1936413 | |||
| : | 1953523 (view as bug list) | Environment: | ||
| Last Closed: | 2021-05-10 12:42:47 UTC | Type: | --- | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1936413 | |||
| Bug Blocks: | 1953523 | |||
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Compliance Operator version 0.1.32 for OpenShift Container Platform 4.7), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:1347 |
Verification pass with 4.7.0-0.nightly-2021-04-25-102429 and compliance-operator.v0.1.31 Note: As there is no plan to add instructions for bios related rules, mark it as pass. # oc get ip NAME CSV APPROVAL APPROVED install-qj96g compliance-operator.v0.1.31 Automatic true # oc get csv NAME DISPLAY VERSION REPLACES PHASE compliance-operator.v0.1.31 Compliance Operator 0.1.31 Succeeded elasticsearch-operator.5.0.3-1 OpenShift Elasticsearch Operator 5.0.3-1 Succeeded # oc get pod NAME READY STATUS RESTARTS AGE compliance-operator-57c5c54b64-h86ml 1/1 Running 0 4m7s ocp4-openshift-compliance-pp-546dc57c56-k8vpk 1/1 Running 0 3m10s rhcos4-openshift-compliance-pp-d9845f65b-f29v7 1/1 Running 0 3m10s # oc create -f - << EOF > apiVersion: compliance.openshift.io/v1alpha1 > kind: ScanSettingBinding > metadata: > name: instructions-check1 > profiles: > - apiGroup: compliance.openshift.io/v1alpha1 > kind: Profile > name: rhcos4-e8 > - apiGroup: compliance.openshift.io/v1alpha1 > kind: Profile > name: rhcos4-moderate > settingsRef: > apiGroup: compliance.openshift.io/v1alpha1 > kind: ScanSetting > name: default > EOF scansettingbinding.compliance.openshift.io/instructions-check1 created # oc get suite NAME PHASE RESULT instructions-check1 DONE NON-COMPLIANT # for i in `oc get compliancecheckresults -l compliance.openshift.io/check-status=MANUAL --no-headers | awk '{print $1}' `; do echo -e "******************Below is the instructions for rule $i"; oc get compliancecheckresults $i -o=jsonpath={.instructions}; echo -e "\n"; done ******************Below is the instructions for rule rhcos4-moderate-master-bios-disable-usb-boot ******************Below is the instructions for rule rhcos4-moderate-master-sshd-limit-user-access To ensure sshd limits the users who can log in, run the following: $ sudo grep AllowUsers /etc/ssh/sshd_config If properly configured, the output should be a list of usernames allowed to log in to this system. ******************Below is the instructions for rule rhcos4-moderate-master-wireless-disable-in-bios ******************Below is the instructions for rule rhcos4-moderate-worker-bios-disable-usb-boot ******************Below is the instructions for rule rhcos4-moderate-worker-sshd-limit-user-access To ensure sshd limits the users who can log in, run the following: $ sudo grep AllowUsers /etc/ssh/sshd_config If properly configured, the output should be a list of usernames allowed to log in to this system. ******************Below is the instructions for rule rhcos4-moderate-worker-wireless-disable-in-bios