[PATCH 1/2] [Fedora] Introduce 'Ensure Yum fedora-updates Repository Enabled' rule

Jan Lieskovsky jlieskov at redhat.com
Thu Oct 10 15:40:18 UTC 2013


Hello Shawn, others,

  don't want this to sound strange, but any progress
while reviewing this proposal - we would like the have
possibility to check if Fedora system is updated wrt
to security fixes (and this patch is a prerequisite for
it).

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team

----- Original Message -----
> From: "Jan Lieskovsky" <jlieskov at redhat.com>
> To: scap-security-guide at lists.fedorahosted.org
> Sent: Thursday, October 3, 2013 7:44:43 PM
> Subject: [PATCH 1/2] [Fedora] Introduce 'Ensure Yum fedora-updates Repository Enabled' rule
> 
> 
> Introduce rule that will be checking if fedora-updates.repo
> repository is enabled.
> 
> While that repository being enabled by default, this rule
> is required as prerequisite for the upcoming 'ensure
> software security patches installed' rule - because if
> fedora-updates.repo Yum repository would be disabled
> on particular system (hopefully no-one is doing this),
> the 'ensure software security patches installed' rule
> would subsequently realize there are no security updates
> available, and might (wrongly) assume / return success.
> 
> Thus prevent this scenario by explicitly checking state
> of fedora-updates.repo.
> 
> Thank you && Regards, Jan.
> --
> Jan iankko Lieskovsky / Red Hat Security Technologies Team
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fedora-Introduce-Ensure-Yum-fedora-updates-Repositor.patch
Type: text/x-patch
Size: 5517 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131010/f23d002b/attachment-0001.bin>


More information about the scap-security-guide mailing list