A question about the ensure_redhat_gpgkey_installed test

Kenneth Stailey kstailey.lists at gmail.com
Mon Sep 10 21:25:36 UTC 2012


Hi,

RHEL6/input/checks/templates/packages_installed.csv contains
rhn_gpgkey but the real Red Hat release signing key package name is
gpg-pubkey.  The version and release strings must be used since they
specify the key ID and there are usually several versions of
gpg-pubkey installed at the same time.

Unless create_package_installed.py and template_package_installed are
refactored to support specifying RPM version and release strings this
test can't use templating.

Given that the only two packages that can have multiple versions
installed are gpg-pubkey and kernel is it worth modifying the
templating code to support these special cases?

Thanks,
Kenneth


More information about the scap-security-guide mailing list