-
Bug
-
Resolution: Won't Do
-
Undefined
-
None
-
rhel-9.3.0
-
None
-
Important
-
rhel-security-compliance
-
ssg_security
-
None
-
False
-
False
-
-
No
-
None
-
None
-
None
-
If docs needed, set a value
-
-
aarch64
-
None
-
57,005
Description of problem:
Remediating aarch64 system using anssi_bp28_high profile causes it to boot into emergency mode.
Version-Release number of selected component (if applicable):
scap-security-guide 0.1.69
How reproducible:
deterministic
Steps to Reproduce:
1. Remediate installed system using ANSSI profile:
oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_anssi_bp28_high --progress --remediate /usr/share/xml/scap/ssg/content/ssg-rhel9-ds.xml
2. Reboot the system
Actual results:
System enters emergency mode ater the reboot:
You are in emergency mode. After logging in, type "journalctl -xb" to view
system logs, "systemctl reboot" to reboot, "systemctl default" or "exit"
to boot into default mode.
Give root password for maintenance
Expected results:
System reboots and it is possible to login into the system.
Additional info:
- blocks
-
RHEL-1421 aarch64 system boots into emergency mode when secure_mode_insmod is on
-
- Closed
-
- external trackers