Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dnf-automatic provides multiple timers #5180

Open
jcpunk opened this issue Feb 7, 2020 · 3 comments
Open

dnf-automatic provides multiple timers #5180

jcpunk opened this issue Feb 7, 2020 · 3 comments
Labels
OVAL OVAL update. Related to the systems assessments.

Comments

@jcpunk
Copy link
Contributor

jcpunk commented Feb 7, 2020

Description of problem:

linux_os/guide/system/software/updating/timer_dnf-automatic_enabled could point towards either dnf-automatic.timer or dnf-automatic-install.timer. Similarly linux_os/guide/system/software/updating/dnf-automatic_apply_updates/ isn't needed if you set the timer to the target dnf-automatic-install.timer

SCAP Security Guide Version:

scap-security-guide-0.1.48-1.fc31

Operating System Version:

Fedora

Steps to Reproduce:

  1. rpm -ql dnf-automatic

Actual Results:

Alternate valid config is not recognized.

Expected Results:

Either timer is vaible.

Addition Information/Debugging Steps:

@matejak matejak added the OVAL OVAL update. Related to the systems assessments. label Feb 19, 2020
@matejak
Copy link
Member

matejak commented Feb 19, 2020

It is a bit difficult to deduce what exactly the issue is about.
Is it the case that the OVAL check is too strict and it requires dnf-automatic.timer to be enabled and running, while dnf-automatic-install.timer would do the trick as well, and it isn't considered by the check?

@jcpunk
Copy link
Contributor Author

jcpunk commented Feb 19, 2020

I think that would do it.

@JGoutin
Copy link

JGoutin commented Oct 24, 2023

Still not pass with 0.1.69.


I confirm that using dnf-automatic-install.timer is equivalent to using dnf-automatic.timer + setting apply_updates=yes under [commands] section in /etc/dnf/automatic.conf.

In this case, both timer_dnf-automatic_enabled and dnf-automatic_apply_updates rules should pass.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
OVAL OVAL update. Related to the systems assessments.
Projects
None yet
Development

No branches or pull requests

3 participants