When doing on-line remediation, i.e. by option "--remediate", the bash fixes are applied.There seems to be a mix of ansible and bash for fix-up scripts, in that some rules only have bash fixes, others only have ansible fixes, while most have both, and a few still have none. When applying remediation during a scan, which ones get used?
Unfortunately no, the default is to use bash, and there is no way to change it.Is there a way to specify?
Ansible remediations are not applied automatically, oscap can't consume ansible fixes. They should be used by ansible to fix the machine.If I have ansible installed, will the ansible fixes automatically get used? If the ansible ones are being used? Do the bash-only fixes get run as well? What about rules that have both?
Staff R&D Engineer, Scientific Computing
_______________________________________________ scap-security-guide mailing list -- firstname.lastname@example.org To unsubscribe send an email to email@example.com
-- Watson Sato Security Technologies | Red Hat, Inc