From 17ab84f5035f9145cf15d2872f0c05275d371377 Mon Sep 17 00:00:00 2001 From: Israel Villar Boillos Date: Fri, 5 Jun 2026 20:18:09 +0100 Subject: [PATCH] Fix sshd_enable_warning_banner_net crash on Debian products The rule had `conflicts: sshd_enable_warning_banner` active for Debian. Since sshd_enable_warning_banner is not included in Debian data streams, OpenSCAP asserts: `xccdf_policy_is_item_selected: Assertion 'false' failed`. Extend the exclusion condition from Ubuntu-only to cover all Debian products. Co-Authored-By: Claude Sonnet 4.6 --- .../ssh/ssh_server/sshd_enable_warning_banner_net/rule.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_enable_warning_banner_net/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_enable_warning_banner_net/rule.yml index b8f255fffe33..96a30bf196d0 100644 --- a/linux_os/guide/services/ssh/ssh_server/sshd_enable_warning_banner_net/rule.yml +++ b/linux_os/guide/services/ssh/ssh_server/sshd_enable_warning_banner_net/rule.yml @@ -41,7 +41,7 @@ references: {{{ complete_ocil_entry_sshd_option(default="no", option="Banner", value="/etc/issue.net") }}} -{{% if 'ubuntu' not in product %}} +{{% if 'ubuntu' not in product and 'debian' not in product %}} conflicts: - sshd_enable_warning_banner {{% endif %}}