Skip to content

Commit

Permalink
Fix RHEL 10 ISM profile fails in Image Mode
Browse files Browse the repository at this point in the history
The rules `audit_access_failed` and `audit_access_success`
fail in the scan of a RHEL 10 Image Mode system hardened with ISM
profiles. The reason is that the profiles don't install the `audit`
RPM package required by these rules to work and at the same time
the `audit` RPM package isn't part of the rhel10-bootc base image.
This is similar to this PR but it fixed only RHEL 9:
#12670
  • Loading branch information
jan-cerny committed Jan 16, 2025
1 parent 0b825f3 commit c6351d4
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions controls/ism_o.yml
Original file line number Diff line number Diff line change
Expand Up @@ -127,6 +127,7 @@ controls:
- audit_rules_privileged_commands
- audit_rules_session_events
- audit_rules_unsuccessful_file_modification
- package_audit_installed
- sshd_print_last_log
- sebool_auditadm_exec_content
status: automated
Expand All @@ -145,6 +146,7 @@ controls:
- audit_rules_privileged_commands
- audit_rules_session_events
- audit_rules_unsuccessful_file_modification
- package_audit_installed
- sshd_print_last_log
- sebool_auditadm_exec_content
status: automated
Expand Down

0 comments on commit c6351d4

Please sign in to comment.