scap-security-guide

No description

Shell 100%

Find a file

Eduard Abdullin 6efc919bda Guard DISA STIG control ids in the controls rebranding Same exception as on the AlmaLinux 9 and 10 branches. DISA control ids (- id: RHEL-08-010000) are DISA's identifiers, matched by create-stig-overlay.py against the DISA manual XCCDF; on a8 they also feed create_scap_delta_tailoring.py --reference stigid, which produces the installed almalinux8_stig_delta_tailoring.xml (patch 1004 enables ssg_build_disa_delta for almalinux8). Renaming them leaves every overlay ruleid="XXXX" and gen_stig_table.py then fails with "unbound prefix". On a8 this is currently a no-op: RHEL 8 STIG ids are zero-padded, so s/RHEL-8/ALMALINUX-8/g never matched them, and the controls block has no bare s/RHEL/AlmaLinux/g. Verified on 0.1.81 by running the whole script both ways in a container: exit 0 for both, products/almalinux8 identical. Making the exception explicit so the zero padding is not what keeps this working - the AlmaLinux 10 ids are unpadded and there the same rewrite broke the build on every arch.	2026-09-10 13:55:40 +03:00
files	Guard DISA STIG control ids in the controls rebranding	2026-09-10 13:55:40 +03:00
config.yaml	Fix product=="rhel8" equality gates for almalinux8; enable auto_increment	2026-06-09 18:22:35 +02:00

Eduard Abdullin 6efc919bda Guard DISA STIG control ids in the controls rebranding

Same exception as on the AlmaLinux 9 and 10 branches. DISA control ids
(- id: RHEL-08-010000) are DISA's identifiers, matched by
create-stig-overlay.py against the DISA manual XCCDF; on a8 they also
feed create_scap_delta_tailoring.py --reference stigid, which produces
the installed almalinux8_stig_delta_tailoring.xml (patch 1004 enables
ssg_build_disa_delta for almalinux8). Renaming them leaves every overlay
ruleid="XXXX" and gen_stig_table.py then fails with "unbound prefix".

On a8 this is currently a no-op: RHEL 8 STIG ids are zero-padded, so
s/RHEL-8/ALMALINUX-8/g never matched them, and the controls block has no
bare s/RHEL/AlmaLinux/g. Verified on 0.1.81 by running the whole script
both ways in a container: exit 0 for both, products/almalinux8 identical.
Making the exception explicit so the zero padding is not what keeps this
working - the AlmaLinux 10 ids are unpadded and there the same rewrite
broke the build on every arch.

2026-09-10 13:55:40 +03:00

files

Guard DISA STIG control ids in the controls rebranding

2026-09-10 13:55:40 +03:00

config.yaml

Fix product=="rhel8" equality gates for almalinux8; enable auto_increment

2026-06-09 18:22:35 +02:00