action #156679
openOSCAP BASH tests for profiles HIPAA and PCI-DSS-4 failing on SP6 build after 15-SP6-Build58.1
0%
Description
BASH HIPPA fails on SLES15 SP6:
https://openqa.suse.de/tests/13716835#step/oscap_xccdf_eval#2/26
#Rules failed (not in expected list):
xccdf_org.ssgproject.content_rule_sshd_disable_kerb_auth
xccdf_org.ssgproject.content_rule_sshd_disable_empty_passwords
xccdf_org.ssgproject.content_rule_sshd_enable_warning_banner
xccdf_org.ssgproject.content_rule_sshd_do_not_permit_user_env
xccdf_org.ssgproject.content_rule_sshd_enable_strictmodes
xccdf_org.ssgproject.content_rule_sshd_disable_root_login
xccdf_org.ssgproject.content_rule_disable_host_auth
xccdf_org.ssgproject.content_rule_sshd_disable_gssapi_auth
PCI-DSS fails https://openqa.suse.de/tests/13716834#step/oscap_xccdf_eval#2/26
#Rules failed (not in expected list):
xccdf_org.ssgproject.content_rule_sshd_set_keepalive
xccdf_org.ssgproject.content_rule_sshd_disable_rhosts
xccdf_org.ssgproject.content_rule_sshd_use_approved_ciphers
xccdf_org.ssgproject.content_rule_sshd_disable_tcp_forwarding
xccdf_org.ssgproject.content_rule_sshd_set_max_auth_tries
xccdf_org.ssgproject.content_rule_sshd_set_max_sessions
xccdf_org.ssgproject.content_rule_sshd_set_maxstartups
xccdf_org.ssgproject.content_rule_sshd_set_loglevel_verbose
xccdf_org.ssgproject.content_rule_disable_host_auth
xccdf_org.ssgproject.content_rule_sshd_use_approved_macs
xccdf_org.ssgproject.content_rule_sshd_set_login_grace_time
xccdf_org.ssgproject.content_rule_sshd_disable_x11_forwarding
xccdf_org.ssgproject.content_rule_file_permissions_sshd_config
xccdf_org.ssgproject.content_rule_sshd_use_strong_kex
xccdf_org.ssgproject.content_rule_sshd_disable_empty_passwords
xccdf_org.ssgproject.content_rule_sshd_do_not_permit_user_env
xccdf_org.ssgproject.content_rule_sshd_disable_root_login
Looks Product is broken since build 15-SP6-Build58.1
On SP4 and SP5 tests are passing.
Updated by viktors.trubovics about 2 months ago
Created Bug 1221063 - [SLES15 SP6][openssh] openssh-server force reinstall resets sshd_config to default
https://bugzilla.suse.com/show_bug.cgi?id=1221063
Updated by openqa_review about 1 month ago
This is an autogenerated message for openQA integration by the openqa_review script:
This bug is still referenced in a failing openQA test: oscap_bash_pci_dss_4
https://openqa.suse.de/tests/13716834#step/oscap_xccdf_eval#2/1
To prevent further reminder comments one of the following options should be followed:
- The test scenario is fixed by applying the bug fix to the tested product or the test is adjusted
- The openQA job group is moved to "Released" or "EOL" (End-of-Life)
- The bugref in the openQA scenario is removed or replaced, e.g.
label:wontfix:boo1234
Expect the next reminder at the earliest in 28 days if nothing changes in this ticket.