When doing on-line remediation, i.e. by option "--remediate", the bash fixes are applied.There seems to be a mix of ansible and bash for fix-up scripts, in that some rules only have bash fixes, others only have ansible fixes, while most have both, and a few still have none. When applying remediation during a scan, which ones get used?
Unfortunately no, the default is to use bash, and there is no way to change it.Is there a way to specify?
Ansible remediations are not applied automatically, oscap can't consume ansible fixes. They should be used by ansible to fix the machine.If I have ansible installed, will the ansible fixes automatically get used? If the ansible ones are being used? Do the bash-only fixes get run as well? What about rules that have both?
Thanks
----------
Chuck Atkins
Staff R&D Engineer, Scientific Computing
Kitware, Inc.
_______________________________________________ scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org
-- Watson Sato Security Technologies | Red Hat, Inc