Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add template for zIPL boot entry option #5908

Merged
merged 18 commits into from
Jul 13, 2020
Merged

Add template for zIPL boot entry option #5908

merged 18 commits into from
Jul 13, 2020

Commits on Jul 9, 2020

  1. Kickstart zipl_bls_entries_option template 

    Create initial version of zIPL specific BLS entries
template by copying bls_entries_option template.
    @yuumasato
    yuumasato committed Jul 9, 2020
    Configuration menu
    Copy the full SHA
    f37e40e View commit details
    Browse the repository at this point in the history

  2. zipl_bls_entries_option: check opts after install 

    Extend zipl_bls_entries_option template to check that the kernel option
is also configure in /etc/kernel/cmdline.
The presence of the argument in /etc/kernel/cmdline ensures that newly
installed kernels will be configure if the option.
    @yuumasato
    yuumasato committed Jul 9, 2020
    Configuration menu
    Copy the full SHA
    f54c3c9 View commit details
    Browse the repository at this point in the history

  3. zipl_bls_entries_option: Add Ansible and Bash

    @yuumasato
    yuumasato committed Jul 9, 2020
    Configuration menu
    Copy the full SHA
    5b66eff View commit details
    Browse the repository at this point in the history

  4. Enable zIPL in argument rules

    @yuumasato
    yuumasato committed Jul 9, 2020
    Configuration menu
    Copy the full SHA
    fd2d807 View commit details
    Browse the repository at this point in the history

  5. zipl_audit_backlog_limit_argument: Fix OCIL typo 

    Fix typo
    @yuumasato
    yuumasato committed Jul 9, 2020
    Configuration menu
    Copy the full SHA
    08db1a1 View commit details
    Browse the repository at this point in the history

  6. zipl_slub_debug_argument: Fix description 

    Description about how to ensure that new boot entries continue compliant
was incorrect due to copy-pasta mistake.
    @yuumasato
    yuumasato committed Jul 9, 2020
    Configuration menu
    Copy the full SHA
    7795063 View commit details
    Browse the repository at this point in the history

  7. Add CCEs to zIPL argument rules

    @yuumasato
    yuumasato committed Jul 9, 2020
    Configuration menu
    Copy the full SHA
    6a3f2f6 View commit details
    Browse the repository at this point in the history

  8. Select zipl BLS option rules in OSPP Profile 

    These rules check and ensure configuration of BLS boot options used by
zIPL.
    @yuumasato
    yuumasato committed Jul 9, 2020
    Configuration menu
    Copy the full SHA
    a7c3313 View commit details
    Browse the repository at this point in the history

  9. Extend Profile resolution to undo rule refinements 

    Just like rule selection, allows rule refinements to be unselected, or "undone".
    @yuumasato
    yuumasato committed Jul 9, 2020
    Configuration menu
    Copy the full SHA
    be070d5 View commit details
    Browse the repository at this point in the history

  10. Undo rule refinements done to zIPL rules 

    Remove the zIPl rule refinementes from STIG profile
    @yuumasato
    yuumasato committed Jul 9, 2020
    Configuration menu
    Copy the full SHA
    2ea270b View commit details
    Browse the repository at this point in the history

Commits on Jul 10, 2020

  1. Update stable test for OSPP Profile 

    I just copied the resolved profile to profile_stability directory.
    @yuumasato
    yuumasato committed Jul 10, 2020
    Configuration menu
    Copy the full SHA
    90d62ba View commit details
    Browse the repository at this point in the history

  2. zipl_bls_entries_option: Add test scenarios

    @yuumasato
    yuumasato committed Jul 10, 2020
    Configuration menu
    Copy the full SHA
    b5d5b0f View commit details
    Browse the repository at this point in the history

  3. zipl_bls_entries_option: Remove hardcoded values 

    The template shouldn't have any hardcoded values.
    @yuumasato
    yuumasato committed Jul 10, 2020
    Configuration menu
    Copy the full SHA
    3b52ab4 View commit details
    Browse the repository at this point in the history

  4. Improve conditional check for the grubby command 

    Let's not trust that /boot/loader/entries/ only contains *.conf files.
Count the number of conf files and how many set the propper options.
    @yuumasato
    yuumasato committed Jul 10, 2020
    Configuration menu
    Copy the full SHA
    68bff71 View commit details
    Browse the repository at this point in the history

  5. zipl_bls_entries_option: Fix sed in test scenario 

    Append "audit=1" space from last option.
    @yuumasato
    yuumasato committed Jul 10, 2020
    Configuration menu
    Copy the full SHA
    79c60bb View commit details
    Browse the repository at this point in the history

  6. Extend scenarios platform and allow remediation 

    These test scenarios can be run on any OS that supports BLS and provides
grubby.
But it will evaluate to not applicable if the OS doesn't use zIPL (i.e.:
has s390utils-base installed).
    @yuumasato
    yuumasato committed Jul 10, 2020
    Configuration menu
    Copy the full SHA
    d513177 View commit details
    Browse the repository at this point in the history

  7. Update comment in OVAL zipl_bls_entries_option 

    Co-authored-by: vojtapolasek <krecoun@gmail.com>
    @yuumasato @vojtapolasek
    yuumasato and vojtapolasek committed Jul 10, 2020
    Configuration menu
    Copy the full SHA
    2e84172 View commit details
    Browse the repository at this point in the history

  8. zipl_bls_entries_option: Supress grep error messages 

    /etc/kernel/cmdline is not always present. Lest suppress any error
message about absent file in the test scenarios.
    @yuumasato
    yuumasato committed Jul 10, 2020
    Configuration menu
    Copy the full SHA
    9bd0afb View commit details
    Browse the repository at this point in the history