Skip to content

package_rng-tools_installed: change applicability#14733

Open
vojtapolasek wants to merge 1 commit into
ComplianceAsCode:masterfrom
vojtapolasek:fix_package_rngd_applicability
Open

package_rng-tools_installed: change applicability#14733
vojtapolasek wants to merge 1 commit into
ComplianceAsCode:masterfrom
vojtapolasek:fix_package_rngd_applicability

Conversation

@vojtapolasek
Copy link
Copy Markdown
Collaborator

Description:

  • change applicability of the rule
  • in RHEL 8, match applicability of the service_rngd_enabled because that is what RHEL 8 STIG says
  • in other STIGs, this package has no such limitations. But I decided to not install it on systems with FIPS enabled as the entropy is gathered not from this source anyway.

Rationale:

Fixes: #14729

Review Hints:

See the linked issue for test cases.

according to rhel8 STIG, it should be enabled in the same way as service_rngd_enabled
according to RHEL9 STIG, there are no limitations regarding presenc of this package. But in general, I believe the package does not make much sense on systems in FIPS mode, because the enthropy in FIPS mode is gathered from a different source.
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 21, 2026

@vojtapolasek: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-aws-openshift-node-compliance 008b3f2 link true /test e2e-aws-openshift-node-compliance
ci/prow/e2e-aws-openshift-platform-compliance 008b3f2 link true /test e2e-aws-openshift-platform-compliance

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Suspicious applicability of rule package_rng-tools_installed

1 participant