Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow preferring SCE #2165

Merged
merged 2 commits into from
Oct 17, 2024
Merged

Commits on Oct 10, 2024

  1. Allow preferring SCE

    This commit introduces a new environment variable
    `OSCAP_PREFERRED_ENGINE`. This variable allows users to set a preffered
    check engine for XCCDF rules. If a rule has multiple checks, the checks
    for the preffered check engine will be used. Allowed values: `SCE`,
    `OVAL`. If this variable is set to `SCE` and a rule has both SCE and
    OVAL checks the SCE check will be used. If this variable is set to
    `OVAL` and a rule has both SCE and OVAL checks the OVAL check will be
    used. If this environment variable isn't set, the standard XCCDF
    mechanism will be used for check selection.
    
    This will allow us to explicitely prefer SCE checks when executing
    `oscap` in Containerfile in the `podman build` process when building
    hardened bootc images.
    
    Also a small test is added to test this feature.
    jan-cerny committed Oct 10, 2024
    Configuration menu
    Copy the full SHA
    f827978 View commit details
    Browse the repository at this point in the history

Commits on Oct 15, 2024

  1. Configuration menu
    Copy the full SHA
    d977ad5 View commit details
    Browse the repository at this point in the history