On Wed, Apr 17, 2019 at 11:48 AM Alexander Bergmann <abergmann@suse.com> wrote:
Hi everyone,

I have a question about the rules execution order. From my testing the
execution order is simply the rule order inside a group of a benchmark.
It looks like the order simply depends on the directory structure of

Is there a way to specify the execution order?

The execution order is followed per the specification, so you would have to make sure that the rules are
ordered correctly in the datastream itself and not the profile.

We will be raising this as an issue that needs to be fixed because it is causing problems.
The reason I'm asking is the following. I have 3 rules A, B and C. Rules
B and C can only be executed successfully if rule A was executed before.

A) package_X_installed
B) service_X_enabled
C) set_X_configuration

Sure, this is not a problem during normal evaluation, but the
remediation scripts will need the dependency. Otherwise the package is
not installed and the script will try to fix something.

An ugly workaround would be to run the remediation twice or three times,
but this should be avoided.

Any idea anyone? :)


Alexander Bergmann <abergmann@suse.com>, Security Engineer, GPG:9FFA4886
SUSE Linux GmbH, GF: Felix Imendörffer, Mary Higgins, Sri Rasiah
HRB 21284 (AG Nürnberg)
scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fedorahosted.org