Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1964691

Summary:	DISA-STIG profile is not correctly documented for RHV-H 4.4
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	Marina Kalinin <mkalinin>
Component:	Documentation	Assignee:	Steve Goodman <sgoodman>
Status:	CLOSED CURRENTRELEASE	QA Contact:	cshao <cshao>
Severity:	high	Docs Contact:
Priority:	high
Version:	4.4.5	CC:	arachman, cshao, ctomasko, ddacosta, lsurette, lsvaty, lveyde, mavital, mhicks, mperina, peyu, sbonazzo, sgoodman, shlei, srevivo, weiwang, yaniwang
Target Milestone:	ovirt-4.4.8	Keywords:	Documentation, ZStream
Target Release:	---	Flags:	mavital: needinfo+ sgoodman: needinfo- sgoodman: needinfo- sgoodman: needinfo-
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-08-05 08:20:01 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Node	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1950239
Bug Blocks:

Description Marina Kalinin 2021-05-25 20:52:28 UTC

In RHV 4.3 we have announced the support of DISA-STIG profile availability for RHV Deployments:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html-single/installing_red_hat_virtualization_as_a_standalone_manager_with_local_databases/index#disa-stig-for-red-hat-linux-7-assembly-securing-rhv

With the migration to RHEL8, this does not work anymore on RHV 4.4 and that's why it is a regression for the customers that used this functionality or plan to use it on RHV 4.4.

This might be a test only bz + documentation to follow, maybe more then just test only.
I see today these 2 related BZs that may mean this is a test only BZ:
Bug#1930550 - RHVH upgrade failed via engine with STIG profile selected
Bug#1950239 - Failed to authenticate ssh session with host during hosted engine deployment with STIG profile

Comment 14 Steve Goodman 2021-08-03 13:15:24 UTC

Chen, would you please verify that the procedural topics I edited are correct?

Comment 15 cshao 2021-08-04 06:58:57 UTC

(In reply to Steve Goodman from comment #14)
> Chen, would you please verify that the procedural topics I edited are
> correct?

ACK+

Comment 16 Steve Goodman 2021-08-04 14:07:00 UTC

Update: Added a new module to add the DISA STIG profile to RHEL hosts. Awaiting Asaf to test steps and provide commands.

Comment 17 Steve Goodman 2021-08-05 08:20:01 UTC

(In reply to Steve Goodman from comment #16)
> Update: Added a new module to add the DISA STIG profile to RHEL hosts.
> Awaiting Asaf to test steps and provide commands.

I created Bug 1990251 - [Docs][Install Guide] Add topic for enabling DISA-STIG profile for RHEL hosts.

Current bug passed peer review. I merged it and am closing this.