Hide Forgot
Description of problem: scap-security-guide has a check for ovirt-host or ovirt-engine package, this prevents some packages, that RHV depends on, being removed. However this check does not seem to work in the plugin. In RHVH, which is image distributed by RHV, the packages are still deleted dispite ovirt-host being installed in that image.
@amusil Hi, could you clarify what are the packages that are being removed by the STIG profile? I did a manual install using `RHVH-4.5-20220411.0-RHVH-x86_64-dvd1.iso` with data stream from 8.6 and a data stream with a possible fix, and the only difference I see is that the installation with the fix has krb5-workstation installed. Both installs have tuned, gssproxy installed, and both installs miss x11 packages (xorg-x11-server-Xorg, xorg-x11-server-common, xorg-x11-server-utils).
(In reply to Watson Yuuma Sato from comment #9) > @amusil Hi, could you clarify what are the packages that are > being removed by the STIG profile? > > I did a manual install using `RHVH-4.5-20220411.0-RHVH-x86_64-dvd1.iso` with > data stream from 8.6 and a data stream with a possible fix, and the only > difference I see is that the installation with the fix has krb5-workstation > installed. > Both installs have tuned, gssproxy installed, and both installs miss x11 > packages (xorg-x11-server-Xorg, xorg-x11-server-common, > xorg-x11-server-utils). The krb5-workstation is the issue, because of the dependency chain it removes ovirt-host in the end, which means whole installation of RHV.
We talked with Ales and just commenting for the record. I did a few manual installs again using 'RHVH-4.5-20220411.0-RHVH-x86_64-dvd1.iso' and I cannot reproduce the issue any more. Ales will do some more testing.