Latest scap-security-guide package breaks anaconda oscap addon

Rocky Linux Tech Help
1

Hello,

The Rocky Linux 8 scap-security-guide package released last night , the most recent scap-security-guide package is missing the Rocky Linux specific xml file, specifically this file “ssg-rl8-ds.xml”. The bad package is scap-security-guide-0.1.74-3.el8_10.rocky.1.1.noarch.rpm.

If I go back to scap-security-guide-0.1.73-1.el8_10.rocky.1.1.noarch.rpm, the Rocky Linux specific xml file is there.

This missing xml file is breaking the kickstart based oscap anaconda add on. Does anyone know who we can contact to remedy the issue?

Thank you

2

Current version as pushed today to the mirrors has the rl8 files.

[root@cm01 tmp]# rpm -q scap-security-guide
scap-security-guide-0.1.74-3.el8_10.rocky.1.3.noarch
[root@cm01 tmp]# rpm -ql scap-security-guide | grep rl8
/usr/share/scap-security-guide/ansible/rl8-playbook-anssi_bp28_enhanced.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-anssi_bp28_high.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-anssi_bp28_intermediary.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-anssi_bp28_minimal.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-cis.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-cis_server_l1.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-cis_workstation_l1.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-cis_workstation_l2.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-cui.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-e8.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-hipaa.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-ism_o.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-ospp.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-pci-dss.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-stig.yml
/usr/share/scap-security-guide/ansible/rl8-playbook-stig_gui.yml
/usr/share/scap-security-guide/bash/rl8-script-anssi_bp28_enhanced.sh
/usr/share/scap-security-guide/bash/rl8-script-anssi_bp28_high.sh
/usr/share/scap-security-guide/bash/rl8-script-anssi_bp28_intermediary.sh
/usr/share/scap-security-guide/bash/rl8-script-anssi_bp28_minimal.sh
/usr/share/scap-security-guide/bash/rl8-script-cis.sh
/usr/share/scap-security-guide/bash/rl8-script-cis_server_l1.sh
/usr/share/scap-security-guide/bash/rl8-script-cis_workstation_l1.sh
/usr/share/scap-security-guide/bash/rl8-script-cis_workstation_l2.sh
/usr/share/scap-security-guide/bash/rl8-script-cui.sh
/usr/share/scap-security-guide/bash/rl8-script-e8.sh
/usr/share/scap-security-guide/bash/rl8-script-hipaa.sh
/usr/share/scap-security-guide/bash/rl8-script-ism_o.sh
/usr/share/scap-security-guide/bash/rl8-script-ospp.sh
/usr/share/scap-security-guide/bash/rl8-script-pci-dss.sh
/usr/share/scap-security-guide/bash/rl8-script-stig.sh
/usr/share/scap-security-guide/bash/rl8-script-stig_gui.sh
/usr/share/xml/scap/ssg/content/ssg-rl8-ds.xml
/usr/share/xml/scap/ssg/content/ssg-rl8-xccdf.xml

Please report future bugs to our bug tracker. See our wiki for more information.

3

Thank you for your reply. I just sync’d my repos and I see the package. I should have been patient, I put the manual oscap commands in my kickstarts.

Thanks again, have a great day.

1 Like
4

It’s all good, things happen. Apologies that you had those issues earlier. Scap profiles can be kind of weird to maintain in Rocky Linux 8 for some reason.