Open
Description
Description of problem:
The uefi
(and its counterpart non-uefi
) platform has different conditionals across supported templ
545E
ate types:
name: cpe:/a:uefi
title: System boot mode is UEFI
# This OVAl check is based on presence of /sys/firmware/efi
check_id: system_boot_mode_is_uefi
bash_conditional: '[ -d /sys/firmware/efi ]'
ansible_conditional: '"/boot/efi" in ansible_mounts | map(attribute="mount") | list'
Conditionals must follow the same logic of applicability.
It might make sense to reconsider the criteria and the name. Also it makes sense to use not uefi
platform expression instead of two platform definitions.
SCAP Security Guide Version:
0.1.76
Extract from #13006.