Introduce rule that will be checking if fedora-updates.repo
repository is enabled.
While that repository being enabled by default, this rule
is required as prerequisite for the upcoming 'ensure
software security patches installed' rule - because if
fedora-updates.repo Yum repository would be disabled
on particular system (hopefully no-one is doing this),
the 'ensure software security patches installed' rule
would subsequently realize there are no security updates
available, and might (wrongly) assume / return success.
Thus prevent this scenario by explicitly checking state
of fedora-updates.repo.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team