8000 The `uefi` and `non-uefi` platforms have incoherent conditionals · Issue #13151 · ComplianceAsCode/content · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
8000
The uefi and non-uefi platforms have incoherent conditionals #13151
Open
@evgenyz

Description

@evgenyz

Description of problem:

The uefi (and its counterpart non-uefi) platform has different conditionals across supported templ 545E ate types:

name: cpe:/a:uefi
title: System boot mode is UEFI
# This OVAl check is based on presence of /sys/firmware/efi
check_id: system_boot_mode_is_uefi
bash_conditional: '[ -d /sys/firmware/efi ]'
ansible_conditional: '"/boot/efi" in ansible_mounts | map(attribute="mount") | list'

Conditionals must follow the same logic of applicability.

It might make sense to reconsider the criteria and the name. Also it makes sense to use not uefi platform expression instead of two platform definitions.

SCAP Security Guide Version:

0.1.76

Extract from #13006.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0