[PATCH 1/2] [Fedora] Introduce 'Ensure Yum fedora-updates Repository Enabled' rule

Jan Lieskovsky jlieskov at redhat.com
Thu Oct 3 17:44:43 UTC 2013


Introduce rule that will be checking if fedora-updates.repo
repository is enabled.

While that repository being enabled by default, this rule
is required as prerequisite for the upcoming 'ensure
software security patches installed' rule - because if
fedora-updates.repo Yum repository would be disabled
on particular system (hopefully no-one is doing this),
the 'ensure software security patches installed' rule
would subsequently realize there are no security updates
available, and might (wrongly) assume / return success.

Thus prevent this scenario by explicitly checking state
of fedora-updates.repo.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fedora-Introduce-Ensure-Yum-fedora-updates-Repositor.patch
Type: text/x-patch
Size: 5517 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131003/7f00e496/attachment-0001.bin>


More information about the scap-security-guide mailing list