Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add baseline-lynis for 15-sp2 #14817

Merged

Conversation

paolostivanin
Copy link
Contributor

@lilyeyes
Copy link
Contributor

Are there any openQA verification runs? It could be easier or good references for baseline review.
For the baselines I usually ask developer jsegitz@suse.de to help to check as there are some permitted status such as "EXPOSED/UNSAFE/..."

@rfan1
Copy link
Contributor

rfan1 commented May 10, 2022

Minor comment :
Change the title to:
Add baseline-lynis for 15-sp2

@lilyeyes
Copy link
Contributor

FYI, I found out a lynis "2.6.1" version (same lynis version on 15sp2) verification runs on sle15sp4 for reference: https://openqa.suse.de/tests/7716986#step/lynis_setup/10

We can compare the baselines with paolo's

@lilyeyes
Copy link
Contributor

lilyeyes commented May 10, 2022

I only have compared "baseline-lynis-audit-system-nocolors-15-SP2-x86_64-textmode" with https://openqa.suse.de/tests/7716987#
Only 1 minor issue found on your baseline: - Minimal of 2 responsive nameservers [ WARNING ]. It is a [ OK ] in https://openqa.suse.de/tests/7716987#step/15_[+]_Networking/4
But it is OK/safe IMO, if you have concerns on this minor issue you can ask developer to confirm.
So for other baselines please ask others to check or check by yourself.

FYI:
[+] Networking

  • Checking IPv6 configuration [ ENABLED ]
    Configuration method [ AUTO ]
    IPv6 only [ NO ]
  • Checking configured nameservers
    • Testing nameservers
      Nameserver: 10.100.192.1 [ OK ]
    • Minimal of 2 responsive nameservers [ WARNING ]

@paolostivanin paolostivanin changed the title Add baseline-lynis for 15.sp2 Add baseline-lynis for 15-sp2 May 10, 2022
@paolostivanin
Copy link
Contributor Author

paolostivanin commented May 16, 2022

Verification runs:

@paolostivanin
Copy link
Contributor Author

Verification runs also for textmode: https://openqa.suse.de/group_overview/431

Copy link
Contributor

@lilyeyes lilyeyes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@michaelgrifalconi michaelgrifalconi merged commit bca8598 into os-autoinst:master May 17, 2022
@tjyrinki
Copy link
Contributor

Nice, verification runs are looking really great!

@paolostivanin paolostivanin deleted the poo93766_poo93769 branch May 27, 2022 05:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
5 participants