Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-1422

aarch64 system boots into emergency mode when secure_mode_insmod is on

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • None
    • Important
    • rhel-security-compliance
    • ssg_security
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • None
    • None
    • None
    • If docs needed, set a value
    • None
    • 57,005

      Description of problem:
      Remediating aarch64 system using anssi_bp28_high profile causes it to boot into emergency mode.

      Version-Release number of selected component (if applicable):
      scap-security-guide 0.1.69

      How reproducible:
      deterministic

      Steps to Reproduce:
      1. Remediate installed system using ANSSI profile:
      oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_anssi_bp28_high --progress --remediate /usr/share/xml/scap/ssg/content/ssg-rhel9-ds.xml
      2. Reboot the system

      Actual results:
      System enters emergency mode ater the reboot:

      You are in emergency mode. After logging in, type "journalctl -xb" to view
      system logs, "systemctl reboot" to reboot, "systemctl default" or "exit"
      to boot into default mode.
      Give root password for maintenance

      Expected results:
      System reboots and it is possible to login into the system.

      Additional info:

              vpolasek@redhat.com Vojtech Polasek
              mmarhefk@redhat.com Matus Marhefka
              Vojtech Polasek Vojtech Polasek
              SSG Security QE SSG Security QE
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: