content icon indicating copy to clipboard operation
content copied to clipboard

test scenario for service_bluetooth_disabled is not causing expected fail

Open vojtapolasek opened this issue 1 year ago • 2 comments

Description of problem:

There is a test scenario which should make the rule service_bluetooth_disabled fail. But the rule passes when it is executed.

  • service_enabled.fail.sh

SCAP Security Guide Version:

stabilization-v0.1.73, commit 0b096bc4d27936b5adf992817f6df250fe8a5501

Operating System Version:

RHEL 8.6

Steps to Reproduce:

  1. ./build_product rhel8
  2. cd tests/
  3. python automatus.py rule --libvirt qemu:///system <domain_name> --remediate-using oscap service_bluetooth_disabled

Actual Results:

The scan after applying test scenario should return "fail", but it returns "pass".

Expected Results:

The test scenario returns "fail" and the remediation is performed. The final result should be "pass".

Additional Information/Debugging Steps:

vojtapolasek avatar May 06 '24 14:05 vojtapolasek

Locally I cannot reproduce:

$ ./automatus.py rule --datastream ../build/ssg-rhel8-ds.xml --remediate-using oscap  --libvirt qemu:///system automatus_rhel_8_6 service_bluetooth_disabled
Setting console output to log level INFO
INFO - The base image option has not been specified, choosing libvirt-based test environment.
INFO - Logging into /home/mburket/Developer/ComplianceAsCode/content/tests/logs/rule-custom-2024-05-06-1614/test_suite.log
INFO - xccdf_org.ssgproject.content_rule_service_bluetooth_disabled
INFO - Script service_enabled.fail.sh using profile (all) OK
INFO - Script service_disabled.pass.sh using profile (all) OK

Mab879 avatar May 06 '24 21:05 Mab879

Needs more investigation from the testing env.

Mab879 avatar May 07 '24 13:05 Mab879

All test scenarios for this rule pass on latest RHEL8. Moreover, 8.6 EUS ends in few weeks and no SSG updates there anymore. Thus, closing this issue.

mildas avatar May 23 '24 08:05 mildas