content
content copied to clipboard
The `uefi` and `non-uefi` platforms have incoherent conditionals
Description of problem:
The uefi (and its counterpart non-uefi) platform has different conditionals across supported template types:
name: cpe:/a:uefi
title: System boot mode is UEFI
# This OVAl check is based on presence of /sys/firmware/efi
check_id: system_boot_mode_is_uefi
bash_conditional: '[ -d /sys/firmware/efi ]'
ansible_conditional: '"/boot/efi" in ansible_mounts | map(attribute="mount") | list'
Conditionals must follow the same logic of applicability.
It might make sense to reconsider the criteria and the name. Also it makes sense to use not uefi platform expression instead of two platform definitions.
SCAP Security Guide Version:
0.1.76
Extract from #13006.