Remove rules from the RHEL9 STIG profile #10877
Conversation
Those rules aren't even RHEL9-compatible
|
Start a new ephemeral environment with changes proposed in this pull request: Fedora Environment Oracle Linux 8 Environment |
|
Code Climate has analyzed commit c9b0781 and detected 0 issues on this pull request. The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 53.2% (0.0% change). View more on Code Climate. |
Is there someplace that we should document this fact? |
|
A test will start failing as soon as it is included, so it's probably fine for the time being. We have to address the profile composition problem more generally, e.g. by leveraging the newly-introduced components, which decompose profiles into smaller groups of rules that can each be addressed by a single SME. |
Those rules aren't even RHEL9-compatible
The RHEL9 SSHD Crypto Policies implementation is different than the RHEL8 one, and it now has an sshd config format vs the former CLI argument format.
Unfortunately, we can't just remove prodtypes from those rules because of tailoring compatibility, so we have to pay attention not to include them again.