-
Bug
-
Resolution: Done
-
Minor
-
None
-
4.17.0
-
None
-
No
-
False
-
-
Release Note Not Required
-
In Progress
Description of problem:
bios-enable-execution-restrictions [1] is not needed for ppc64le. NX/XD is a hardware cpu feature not available on ppc64le. The Compliance Operator profiles ocp4-disa-stig and ocp4-disa-stig-node use bios-enable-execution-restrictions. *References* 1. https://github.com/ComplianceAsCode/content/blob/master/linux_os/guide/system/permissions/restrictions/enable_nx/bios_enable_execution_restrictions/policy/stig/shared.yml 2. Kernel features https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/arch/powerpc/include/uapi/asm/cputable.h
Version-Release number of selected component (if applicable):
4.17.0
How reproducible:
Each time
Steps to Reproduce:
1.Setup the ProfileBundle 2.create ocp4-disa-stig ocp4-disa-stig-node 3.Check the failed rule, it should be excluded
Actual results:
FAIL
Expected results:
Exclusion
Additional info:
- links to
-
RHBA-2024:138712 OpenShift Compliance Operator 1.6.0
- mentioned on