From a48519159189c7b1c48bcdbd48908fbfd60e2829 Mon Sep 17 00:00:00 2001
From: Watson Sato <wsato@redhat.com>
Date: Tue, 12 Feb 2019 18:27:35 +0100
Subject: [PATCH] Check for software updates in RHEL8 profiles
---
rhel8/profiles/ospp.profile | 1 +
rhel8/profiles/pci-dss.profile | 1 +
2 files changed, 2 insertions(+)
diff --git a/rhel8/profiles/ospp.profile b/rhel8/profiles/ospp.profile
index 4c8fe02f1..4e3302be4 100644
--- a/rhel8/profiles/ospp.profile
+++ b/rhel8/profiles/ospp.profile
@@ -187,6 +187,7 @@ selections:
- audit_rules_kernel_module_loading_insmod
- audit_rules_kernel_module_loading_modprobe
- audit_rules_kernel_module_loading_rmmod
+ - security_patches_up_to_date
- audit_rules_etc_passwd_open
- audit_rules_etc_passwd_openat
- audit_rules_etc_passwd_open_by_handle_at
diff --git a/rhel8/profiles/pci-dss.profile b/rhel8/profiles/pci-dss.profile
index ec901d84c..162de0d9d 100644
--- a/rhel8/profiles/pci-dss.profile
+++ b/rhel8/profiles/pci-dss.profile
@@ -112,6 +112,7 @@ selections:
- ensure_redhat_gpgkey_installed
- ensure_gpgcheck_globally_activated
- ensure_gpgcheck_never_disabled
+ - security_patches_up_to_date
- smartcard_auth
- set_password_hashing_algorithm_systemauth
- set_password_hashing_algorithm_logindefs