I think I found a problem with CentOS content

Bond Masuda bond.masuda at hexadiam.com
Thu Jul 30 20:40:59 UTC 2015


For rule id: ensure_redhat_gpgkey_installed, it appears to be looking
for /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release. I'm sure this works
fine for RHEL, but the CentOS content also references this same test,
which will fail since it should be looking for
/etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6 instead. Perhaps a slightly
modified version of the test is necessary for the various derivatives of
RHEL like CentOS?

-Bond


More information about the scap-security-guide mailing list