Blame SOURCES/scap-security-guide-0.1.62-fix_oval_5_10_validation-PR_8782.patch

5e4bca
From 2a7e57d7714e9931ec4d43a0d25269258dd4af2a Mon Sep 17 00:00:00 2001
5e4bca
From: Watson Sato <wsato@redhat.com>
5e4bca
Date: Tue, 17 May 2022 10:24:26 +0200
5e4bca
Subject: [PATCH] Do not include symlink_state in 5.10 content
5e4bca
5e4bca
The symlink_test, object and state were added in OVAL 5.11. These
5e4bca
elements should not be included in OVAL 5.10 content because they break
5e4bca
validation.
5e4bca
---
5e4bca
 shared/templates/sysctl/oval.template | 2 +-
5e4bca
 1 file changed, 1 insertion(+), 1 deletion(-)
5e4bca
5e4bca
diff --git a/shared/templates/sysctl/oval.template b/shared/templates/sysctl/oval.template
5e4bca
index e21b0344cb6..207052664a4 100644
5e4bca
--- a/shared/templates/sysctl/oval.template
5e4bca
+++ b/shared/templates/sysctl/oval.template
5e4bca
@@ -222,7 +222,6 @@
5e4bca
     <unix:filepath operation="equals" var_ref="local_var_conf_files_{{{ SYSCTLID }}}" />
5e4bca
     <filter action="exclude">state_symlink_points_outside_usual_dirs_{{{ SYSCTLID }}}</filter>
5e4bca
   </unix:symlink_object>
5e4bca
-{{% endif %}}
5e4bca
 
5e4bca
   
5e4bca
        ^/etc/sysctl.conf$
5e4bca
@@ -232,6 +231,7 @@
5e4bca
   <unix:symlink_state comment="State that matches symlinks referencing files not in the default dirs" id="state_symlink_points_outside_usual_dirs_{{{ SYSCTLID }}}" version="1">
5e4bca
     <unix:canonical_path operation="pattern match">^(?!(\/etc\/sysctl\.conf$|(\/etc|\/run|\/usr\/lib)\/sysctl\.d\/)).*$</unix:canonical_path>
5e4bca
   </unix:symlink_state>
5e4bca
+{{% endif %}}
5e4bca
 
5e4bca
   <local_variable comment="List of conf files" datatype="string" id="local_var_conf_files_{{{ SYSCTLID }}}" version="1">
5e4bca
     <object_component object_ref="object_static_set_unfiltered_sysctls_{{{ SYSCTLID }}}" item_field="filepath" />