oscap-anaconda-addon icon indicating copy to clipboard operation
oscap-anaconda-addon copied to clipboard

oscap-anaconda-addon: Add option to disable remediation scripts

Open redhatrises opened this issue 8 years ago • 0 comments

Certain remediations have the ability to brick a system and/or prevent any access to remediated system. An option such as disable-remediation or --disable-remediation should be added to the Oscap Anaconda plugin that would allow the disabling of remediation scripts in Anaconda. For example:

<Rule id="disable_ssh_root_access" />
...
<fix reboot=”false” disruption=”high” system=”urn:redhat:anaconda:pre”>
disable-remediation
</fix>
...

While it would require a remediation scan post building, it would help to prevent bricking a system immediately on build.

redhatrises avatar Jan 03 '17 14:01 redhatrises