Hello Shawn, others,
don't want this to sound strange, but any progress
while reviewing this proposal - we would like the have
possibility to check if Fedora system is updated wrt
to security fixes (and this patch is a prerequisite for
it).
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
----- Original Message -----
From: "Jan Lieskovsky" <jlieskov(a)redhat.com>
To: scap-security-guide(a)lists.fedorahosted.org
Sent: Thursday, October 3, 2013 7:44:43 PM
Subject: [PATCH 1/2] [Fedora] Introduce 'Ensure Yum fedora-updates Repository
Enabled' rule
Introduce rule that will be checking if fedora-updates.repo
repository is enabled.
While that repository being enabled by default, this rule
is required as prerequisite for the upcoming 'ensure
software security patches installed' rule - because if
fedora-updates.repo Yum repository would be disabled
on particular system (hopefully no-one is doing this),
the 'ensure software security patches installed' rule
would subsequently realize there are no security updates
available, and might (wrongly) assume / return success.
Thus prevent this scenario by explicitly checking state
of fedora-updates.repo.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team