Skip to content

Commit

Permalink
Extend waiver for rule aide_use_fips_hashes
Browse files Browse the repository at this point in the history
The rule aide_use_fips_hashes fails during daily productization
on RHEL 10 because the installed OS isn't FIPS 140 certified.
With similar reasoning of RHEL 9 we will waive it.
  • Loading branch information
jan-cerny authored and matusmarhefka committed Jan 2, 2025
1 parent d4d75d4 commit 85739e5
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions conf/waivers/20-long-term
Original file line number Diff line number Diff line change
Expand Up @@ -73,9 +73,9 @@
/hardening/kickstart/.+/systemd_tmp_mount_enabled
True

# RHEL-9 is not FIPS certified yet
# RHEL 9 and 10 are not FIPS certified yet
/hardening/.+/aide_use_fips_hashes
rhel == 9
rhel >= 9

# OAA just failed without an error, as usual
# https://issues.redhat.com/browse/OPENSCAP-3321
Expand Down

0 comments on commit 85739e5

Please sign in to comment.