content icon indicating copy to clipboard operation
content copied to clipboard

The `uefi` and `non-uefi` platforms have incoherent conditionals

Open evgenyz opened this issue 10 months ago • 0 comments

Description of problem:

The uefi (and its counterpart non-uefi) platform has different conditionals across supported template types:

name: cpe:/a:uefi
title: System boot mode is UEFI
# This OVAl check is based on presence of /sys/firmware/efi
check_id: system_boot_mode_is_uefi
bash_conditional: '[ -d /sys/firmware/efi ]'
ansible_conditional: '"/boot/efi" in ansible_mounts | map(attribute="mount") | list'

Conditionals must follow the same logic of applicability.

It might make sense to reconsider the criteria and the name. Also it makes sense to use not uefi platform expression instead of two platform definitions.

SCAP Security Guide Version:

0.1.76

Extract from #13006.

evgenyz avatar Mar 06 '25 21:03 evgenyz