oscap-anaconda-addon
oscap-anaconda-addon copied to clipboard
OpenSCAP
The add-on to Anaconda installer providing scanning capabilities
During review of the PR https://github.com/OpenSCAP/oscap-anaconda-addon/pull/225 we have discovered that when performing a kickstart installation in GUI mode the profile ID in the kickstart needs to be specified in the...
Trying to deploy CentOS Stream 8 with DISA-STIG. Using https://koji.mbox.centos.org/pkgs/packages/scap-security-guide/0.1.60/7.el8/noarch/scap-security-guide-0.1.60-7.el8.noarch.rpm during the installation it fails with `When dealing with datastream, there was already the ssg-jre-ds-1.2.xml when setting the new ssg-rhel7-ds-1.2.xml`
We require the tailoring file must be located under `/tmp/openscap_data`. However this is not documented and is not user friendly. We should allow arbitrary path I think. Another solution could...
The TUI interface is one of the two interactive interfaces an Anaconda addon may implement.
The [content location detection code](https://github.com/OpenSCAP/oscap-anaconda-addon/blob/rhel7-branch/org_fedora_oscap/common.py#L55) may not work according to expectations on some platforms, and #79 makes workarounds quite tedious. As the content location is known at build-time of the...
During installation of RHEL8, when a security policy is selected, and then the policy is changes to a different one, it seems that list of excluded packages is not reset....
Certain packages are only applicable to certain types of machines with certain characteristics. For example: processor capabilities (e.g: AES support), architecture specifics. OAA should support different remediation handling according to...
Directory `testing_files` contains mess of files that are not really useful for testing. It would be nice to go through them, and remove all that are not used. And recheck...
Certain remediations have the ability to brick a system and/or prevent any access to remediated system. An option such as `disable-remediation` or `--disable-remediation` should be added to the Oscap Anaconda...
See https://github.com/rhinstaller/anaconda/pull/5570 See example of the fix here: https://github.com/rhinstaller/initial-setup/pull/152
