Jan Černý
Jan Černý
Fortunately, the rule harden_openssl_crypto_policy isn't a part of any existing profile. The rule was used in history but we can't remove existing rules because of backwards compatibility. Unless users explicitly...
OpenSCAP should be able to generate this section to the generated kickstart when a rule has a kickstart type remediation with the following contents: ``` kdump disable ```
Yes, it doesn't use it
I have created PR https://github.com/ComplianceAsCode/content/pull/12856 where I will add the ```%addon com_redhat_kdump --disable``` to the remediation. However, that won't fix this issue - see the description there.
The PR #12856 has been merged, but the rule still fails - see the description there.
Yes, this is blocked by https://github.com/ComplianceAsCode/content/issues/12282.
We took a look into the rules and we think that some of them are still good candidates to be rewritten using template.
The rule grub2_slub_debug_argument isn't part of RHEL 9 stig profile now. It was replaced by to grub2_init_on_free by 21270b6f186f5a18e15c23600bdf1af2d351cbbe and the rule grub2_init_on_free is aligned with DISA content and passes...
In the latest RHEL 8 STIG V2R3 these rules no longer have corresponding rules in DISA SCAP content. They are part of the manual.xml but they aren't present in scap.xml....
@sluetze Please resolve the conflicts and rebase on the latest upstream master branch.