-
Notifications
You must be signed in to change notification settings - Fork 685
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
improve applicability of rule package_rear_installed #10144
improve applicability of rule package_rear_installed #10144
Conversation
the rule is not applicable if: - architecture is S390x and RHEL is <= 8.4 - architecture is aarch64 and RHEL or OL >= 9.0
change it in OVAL descriptions rename the file so taht OS is in capital
e1c9b36
to
4d47f60
Compare
I think that the generated
|
@jan-cerny you are unfortunately correct. And there is not much we can do about it right now because we do not have proven way how to compare versions in Bash conditionals so far. Currently, Ansible conditionals will work correctly - you can test it. Bash conditionals won't. I know this is inconsistency and we plan to address it in the future. But at the other hand, Bash remediations should be used with oscap xccdf eval --remediate (or when generated from test results). They should not be blindly used as standalone playbooks and if someone decides to do so, they should review it. Any ideas or proposals for this problem? @yuumasato @matejak |
Description:
Create appropriate platforms to fullfill the following:
Make the rule not applicable in following cases:
Rationale:
Review Hints: