Bug 2015796 - [RFE] RHV Manager should support running on a host with DISA STIG security profile applied
Summary: [RFE] RHV Manager should support running on a host with DISA STIG security pr...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-engine
Version: 4.4.8
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ovirt-4.5.0-1
: 4.5.0
Assignee: Artur Socha
QA Contact: Guilherme Santos
URL:
Whiteboard:
Depends On: 1902272 2050071 2055149 2055860 2089332
Blocks: 2072987
TreeView+ depends on / blocked
 
Reported: 2021-10-20 06:32 UTC by Martin Perina
Modified: 2022-05-26 16:23 UTC (History)
10 users (show)

Fixed In Version: ovirt-engine-4.5.0
Doc Type: Release Note
Doc Text:
Red Hat Virtualization Manager 4.4 SP1 is now capable of running on a host with the RHEL 8.6 DISA STIG OpenSCAP profile applied.
Clone Of:
Environment:
Last Closed: 2022-05-26 16:23:22 UTC
oVirt Team: Infra
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github ComplianceAsCode content pull 7961 0 None open Filter out RHEL8 STIG rules on RHV hosts 2021-12-09 12:09:52 UTC
Github oVirt ovirt-engine pull 78 0 None Merged packaging: fapolicyd allow Wildfly/EAP runtime tmp 2022-05-16 12:29:41 UTC
Red Hat Issue Tracker RHV-43844 0 None None None 2021-10-20 06:33:41 UTC
Red Hat Knowledge Base (Solution) 6955078 0 None None None 2022-05-25 18:46:34 UTC
Red Hat Product Errata RHSA-2022:4711 0 None None None 2022-05-26 16:23:52 UTC
oVirt gerrit 117373 0 master ABANDONED packaging: fapolicyd rules for Wildfly/EAP tmp 2022-05-16 12:29:53 UTC
oVirt gerrit 117509 0 master ABANDONED packaging: Wildfly/EAP runtime at /var/tmp 2021-11-08 14:11:20 UTC

Description Martin Perina 2021-10-20 06:32:36 UTC 
RHV Manager should be able to properly run on a host (or a VM in case of hosted engine installation) where official DISA STIG profile for RHEL 8 is applied

https://www.redhat.com/en/blog/disa-has-released-red-hat-enterprise-linux-8-stig
http://static.open-scap.org/ssg-guides/ssg-rhel8-guide-stig.html
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems
Comment 1 Martin Perina 2021-10-20 06:42:41 UTC 
The effort to make RHV hypervisor working with DISA STIG is tracked in BZ2015802
Comment 15 errata-xmlrpc 2022-05-26 16:23:22 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: RHV Manager (ovirt-engine) [ovirt-4.5.0] security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:4711
Note You need to log in before you can comment on or make changes to this bug.