Blame SOURCES/scap-security-guide-0.1.58-add_rhel_minor_check-PR_7251.patch

76240a
From b814fc94d0fb360ef53a6b735e9520df5b484589 Mon Sep 17 00:00:00 2001
76240a
From: Matthew Burket <mburket@redhat.com>
76240a
Date: Wed, 14 Jul 2021 12:52:13 -0500
76240a
Subject: [PATCH 1/3] Add Jinja-based RHEL 8 minor check
76240a
76240a
---
76240a
 shared/checks/oval/installed_OS_is_rhel8.xml | 29 ++++++++++++++++++++
76240a
 1 file changed, 29 insertions(+)
76240a
76240a
diff --git a/shared/checks/oval/installed_OS_is_rhel8.xml b/shared/checks/oval/installed_OS_is_rhel8.xml
76240a
index a9699411ce7..fdd3c870d43 100644
76240a
--- a/shared/checks/oval/installed_OS_is_rhel8.xml
76240a
+++ b/shared/checks/oval/installed_OS_is_rhel8.xml
76240a
@@ -44,6 +44,35 @@
76240a
     <linux:name>redhat-release</linux:name>
76240a
   </linux:rpminfo_object>
76240a
 
76240a
+  {{% for minorversion in range(0, 9) %}}
76240a
+  <definition class="inventory" id="installed_OS_is_rhel8_{{{ minorversion }}}" version="1">
76240a
+    <metadata>
76240a
+      <title>Red Hat Enterprise Linux 8.{{{ minorversion }}}</title>
76240a
+      <affected family="unix">
76240a
+        <platform>Red Hat Enterprise Linux 8.{{{ minorversion }}}</platform>
76240a
+      </affected>
76240a
+      <reference ref_id="cpe:/o:redhat:enterprise_linux:8.{{{ minorversion }}}" source="CPE" />
76240a
+      <description>The operating system installed on the system is Red Hat Enterprise Linux 8.{{{  minorversion}}}</description>
76240a
+    </metadata>
76240a
+  </definition>
76240a
+
76240a
+  <criteria>
76240a
+    <criterion comment="RHEL.{{{ minorversion }}} 8 is installed" test_ref="test_rhel8_{{{ minorversion }}}" />
76240a
+  </criteria>
76240a
+
76240a
+  
76240a
+   id="test_rhel8_{{{ minorversion }}}" version="1">
76240a
+    <linux:object object_ref="obj_rhel8_{{{ minorversion }}}" />
76240a
+    <linux:state state_ref="state_rhel8_{{{ minorversion }}}" />
76240a
+  </linux:rpminfo_test>
76240a
+  <linux:rpminfo_state id="state_rhel8_{{{ minorversion }}}" version="1">
76240a
+    <linux:version operation="pattern match">^8.{{{ minorversion }}}*$</linux:version>
76240a
+  </linux:rpminfo_state>
76240a
+  <linux:rpminfo_object id="obj_rhel8_{{{ minorversion }}}" version="1">
76240a
+    <linux:name>redhat-release</linux:name>
76240a
+  </linux:rpminfo_object>
76240a
+  {{% endfor %}}
76240a
+
76240a
   <ind:textfilecontent54_test check="all" comment="RHEVH base RHEL is version 8" id="test_rhevh_rhel8_version" version="1">
76240a
     <ind:object object_ref="obj_rhevh_rhel8_version" />
76240a
     <ind:state state_ref="state_rhevh_rhel8_version" />
76240a
76240a
From d37d303654be74758c19615ef027b3bafa2d7217 Mon Sep 17 00:00:00 2001
76240a
From: Carlos Matos <cmatos@redhat.com>
76240a
Date: Wed, 14 Jul 2021 15:30:02 -0400
76240a
Subject: [PATCH 2/3] Adding cpe's to product.yml
76240a
76240a
---
76240a
 products/rhel8/product.yml | 45 ++++++++++++++++++++++++++++++++++++++
76240a
 1 file changed, 45 insertions(+)
76240a
76240a
diff --git a/products/rhel8/product.yml b/products/rhel8/product.yml
76240a
index 3278207fcb4..14336bfddf1 100644
76240a
--- a/products/rhel8/product.yml
76240a
+++ b/products/rhel8/product.yml
76240a
@@ -27,6 +27,51 @@ cpes:
76240a
       title: "Red Hat Enterprise Linux 8"
76240a
       check_id: installed_OS_is_rhel8
76240a
 
76240a
+  - rhel8.0:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.0"
76240a
+      title: "Red Hat Enterprise Linux 8.0"
76240a
+      check_id: installed_OS_is_rhel8_0
76240a
+
76240a
+  - rhel8.1:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.1"
76240a
+      title: "Red Hat Enterprise Linux 8.1"
76240a
+      check_id: installed_OS_is_rhel8_1
76240a
+
76240a
+  - rhel8.2:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.2"
76240a
+      title: "Red Hat Enterprise Linux 8.2"
76240a
+      check_id: installed_OS_is_rhel8_2
76240a
+
76240a
+  - rhel8.3:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.3"
76240a
+      title: "Red Hat Enterprise Linux 8.3"
76240a
+      check_id: installed_OS_is_rhel8_3
76240a
+
76240a
+  - rhel8.4:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.4"
76240a
+      title: "Red Hat Enterprise Linux 8.4"
76240a
+      check_id: installed_OS_is_rhel8_4
76240a
+
76240a
+  - rhel8.5:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.5"
76240a
+      title: "Red Hat Enterprise Linux 8.5"
76240a
+      check_id: installed_OS_is_rhel8_5
76240a
+
76240a
+  - rhel8.6:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.6"
76240a
+      title: "Red Hat Enterprise Linux 8.6"
76240a
+      check_id: installed_OS_is_rhel8_6
76240a
+
76240a
+  - rhel8.7:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.7"
76240a
+      title: "Red Hat Enterprise Linux 8.7"
76240a
+      check_id: installed_OS_is_rhel8_7
76240a
+
76240a
+  - rhel8.8:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.8"
76240a
+      title: "Red Hat Enterprise Linux 8.8"
76240a
+      check_id: installed_OS_is_rhel8_8
76240a
+
76240a
 # Mapping of CPE platform to package
76240a
 platform_package_overrides:
76240a
   login_defs: "shadow-utils"
76240a
76240a
From c4e4fd7b0449ba4655020fc0dc99ae3c4523b8cc Mon Sep 17 00:00:00 2001
76240a
From: Matthew Burket <mburket@redhat.com>
76240a
Date: Mon, 19 Jul 2021 08:12:34 -0500
76240a
Subject: [PATCH 3/3] Add checks to go up to RHEL 8.10
76240a
76240a
This also makes the checks work.
76240a
---
76240a
 products/rhel8/product.yml                   | 10 ++++++++++
76240a
 shared/checks/oval/installed_OS_is_rhel8.xml | 10 +++++-----
76240a
 2 files changed, 15 insertions(+), 5 deletions(-)
76240a
76240a
diff --git a/products/rhel8/product.yml b/products/rhel8/product.yml
76240a
index 14336bfddf1..78c987b2457 100644
76240a
--- a/products/rhel8/product.yml
76240a
+++ b/products/rhel8/product.yml
76240a
@@ -72,6 +72,16 @@ cpes:
76240a
       title: "Red Hat Enterprise Linux 8.8"
76240a
       check_id: installed_OS_is_rhel8_8
76240a
 
76240a
+  - rhel8.9:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.9"
76240a
+      title: "Red Hat Enterprise Linux 8.9"
76240a
+      check_id: installed_OS_is_rhel8_9
76240a
+
76240a
+  - rhel8.10:
76240a
+      name: "cpe:/o:redhat:enterprise_linux:8.10"
76240a
+      title: "Red Hat Enterprise Linux 8.10"
76240a
+      check_id: installed_OS_is_rhel8_10
76240a
+
76240a
 # Mapping of CPE platform to package
76240a
 platform_package_overrides:
76240a
   login_defs: "shadow-utils"
76240a
diff --git a/shared/checks/oval/installed_OS_is_rhel8.xml b/shared/checks/oval/installed_OS_is_rhel8.xml
76240a
index fdd3c870d43..feab963b941 100644
76240a
--- a/shared/checks/oval/installed_OS_is_rhel8.xml
76240a
+++ b/shared/checks/oval/installed_OS_is_rhel8.xml
76240a
@@ -44,7 +44,7 @@
76240a
     <linux:name>redhat-release</linux:name>
76240a
   </linux:rpminfo_object>
76240a
 
76240a
-  {{% for minorversion in range(0, 9) %}}
76240a
+  {{% for minorversion in range(0, 11) %}}
76240a
   <definition class="inventory" id="installed_OS_is_rhel8_{{{ minorversion }}}" version="1">
76240a
     <metadata>
76240a
       <title>Red Hat Enterprise Linux 8.{{{ minorversion }}}</title>
76240a
@@ -52,13 +52,13 @@
76240a
         <platform>Red Hat Enterprise Linux 8.{{{ minorversion }}}</platform>
76240a
       </affected>
76240a
       <reference ref_id="cpe:/o:redhat:enterprise_linux:8.{{{ minorversion }}}" source="CPE" />
76240a
-      <description>The operating system installed on the system is Red Hat Enterprise Linux 8.{{{  minorversion}}}</description>
76240a
+      <description>The operating system installed on the system is Red Hat Enterprise Linux 8.{{{ minorversion }}}</description>
76240a
     </metadata>
76240a
+    <criteria>
76240a
+      <criterion comment="RHEL 8.{{{ minorversion }}} is installed" test_ref="test_rhel8_{{{ minorversion }}}" />
76240a
+    </criteria>
76240a
   </definition>
76240a
 
76240a
-  <criteria>
76240a
-    <criterion comment="RHEL.{{{ minorversion }}} 8 is installed" test_ref="test_rhel8_{{{ minorversion }}}" />
76240a
-  </criteria>
76240a
 
76240a
   
76240a
    id="test_rhel8_{{{ minorversion }}}" version="1">