Do not require existence of /var/tmp/tmp-inst #11762
Conversation
We will not require the parent directory to exist, the OVAL test will pass also if the directory doesn't exist. It isn't mandatory to create the parent directory because when the directory doesn't exist, it gets created automatically by pam. However, if the parent directory exists, it must have correct mode, otherwise the polyinstantiation will fail. This change is very similar to the change that we have done to the sister rule accounts_polyinstantiated_tmp in 13d2d86. More context: RHSecurityCompliance/contest#129 (comment)
jan-cerny
added
the
Update Rule
|
Start a new ephemeral environment with changes proposed in this pull request: rhel8 (from CTF) Environment (using Fedora as testing environment) Fedora Testing Environment Oracle Linux 8 Environment |
|
🤖 A k8s content image for this PR is available at: Click here to see how to deploy itIf you alread have Compliance Operator deployed: Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and: |
|
Code Climate has analyzed commit 8f0e767 and detected 0 issues on this pull request. The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 59.3% (0.0% change). View more on Code Climate. |
These Ansible remdiations have been added to upstream in these PRs: - ComplianceAsCode/content#11762 - ComplianceAsCode/content#11763
These Ansible remdiations have been added to upstream in these PRs: - ComplianceAsCode/content#11762 - ComplianceAsCode/content#11763
We will not require the parent directory to exist, the OVAL test will pass also if the directory doesn't exist. It isn't mandatory to create the parent directory because when the directory doesn't exist, it gets created automatically by pam. However, if the parent directory exists, it must have correct mode, otherwise the polyinstantiation will fail.
This change is very similar to the change that we have done to the sister rule accounts_polyinstantiated_tmp in 13d2d86.
More context:
RHSecurityCompliance/contest#129 (comment)