oscap-anaconda-addon
oscap-anaconda-addon copied to clipboard
oscap-anaconda-addon: Add option to disable remediation scripts
Certain remediations have the ability to brick a system and/or prevent any access to remediated system.
An option such as disable-remediation
or --disable-remediation
should be added to the Oscap Anaconda plugin that would allow the disabling of remediation scripts in Anaconda. For example:
<Rule id="disable_ssh_root_access" />
...
<fix reboot=”false” disruption=”high” system=”urn:redhat:anaconda:pre”>
disable-remediation
</fix>
...
While it would require a remediation scan post building, it would help to prevent bricking a system immediately on build.