diff --git a/linux_os/guide/system/software/integrity/fips/enable_fips_mode/oval/rhcos4.xml b/linux_os/guide/system/software/integrity/fips/enable_fips_mode/oval/rhcos4.xml index a63be7e32e6..391e347793c 100644 --- a/linux_os/guide/system/software/integrity/fips/enable_fips_mode/oval/rhcos4.xml +++ b/linux_os/guide/system/software/integrity/fips/enable_fips_mode/oval/rhcos4.xml @@ -3,7 +3,7 @@ {{{ oval_metadata("Check if FIPS mode is enabled on the system") }}} - + diff --git a/linux_os/guide/system/software/integrity/fips/sysctl_crypto_fips_enabled/oval/rhcos4.xml b/linux_os/guide/system/software/integrity/fips/sysctl_crypto_fips_enabled/oval/rhcos4.xml index f298cb510e1..d2a6fa6b47d 100644 --- a/linux_os/guide/system/software/integrity/fips/sysctl_crypto_fips_enabled/oval/rhcos4.xml +++ b/linux_os/guide/system/software/integrity/fips/sysctl_crypto_fips_enabled/oval/rhcos4.xml @@ -1,18 +1,18 @@ - + {{{ oval_metadata("The kernel 'crypto.fips_enabled' parameter should be set to '1' in system runtime.") }}} - + - + id="test_sysctl_crypto_fips_enabled" version="1"> + - + /proc/sys/crypto/fips_enabled ^1$ 1 diff --git a/ssg/build_ovals.py b/ssg/build_ovals.py index 5e6099c5466..4285ad4a5fb 100644 --- a/ssg/build_ovals.py +++ b/ssg/build_ovals.py @@ -425,9 +425,10 @@ def _benchmark_specific_actions( (os.path.dirname(os.path.dirname(file_path)))) self._store_intermediate_file(rule_id, xml_content) if not _check_rule_id(oval_file_tree, rule_id): - msg = "OVAL definition in '%s' doesn't match rule ID '%s'." % ( + msg = "ERROR: OVAL definition in '%s' doesn't match rule ID '%s'." % ( file_path, rule_id) print(msg, file=sys.stderr) + sys.exit(1) def _get_context(self, directory, from_benchmark): if from_benchmark: