Skip to content

configure_opensc_nss_db remediation fix#7046

Closed
mildas wants to merge 1 commit intoComplianceAsCode:masterfrom
mildas:opensc_nss_db_remediation
Closed

configure_opensc_nss_db remediation fix#7046
mildas wants to merge 1 commit intoComplianceAsCode:masterfrom
mildas:opensc_nss_db_remediation

Conversation

@mildas
Copy link
Copy Markdown
Contributor

@mildas mildas commented May 25, 2021

Description:

The remediation needs to ensure that opensc is installed because it uses the pkcs11-switch script from the package and it also needs opensc for NSS db.

/usr/bin/pkcs11-switch is the script for switching db. Not the $(/usr/bin/pkcs11-switch) output (the script outputs current NSS db - "opensc", "coolkey", or empty string).

Unfortunately, the remediation still might not work as expected on rhel7, because the database switch might require user interaction, see https://bugzilla.redhat.com/show_bug.cgi?id=1719753. It works when no database is set (no user interaction needed). However, when e.g. coolkey is used, then user is propted with:

WARNING: Performing this operation while the browser is running could cause
corruption of your security databases. If the browser is currently running,
you should exit browser before continuing this operation. Type
'q ' to abort, or to continue:

@openscap-ci
Copy link
Copy Markdown
Collaborator

Changes identified:
Rules:
 configure_opensc_nss_db

Show details

Rule configure_opensc_nss_db:
 Found change in bash remediation.

Recommended tests to execute:
 build_product rhel7
 tests/test_suite.py rule --libvirt qemu:///system test-suite-vm --remediate-using bash --datastream build/ssg-rhel7-ds.xml configure_opensc_nss_db

@JAORMX
Copy link
Copy Markdown
Contributor

JAORMX commented May 26, 2021

/retest

@jan-cerny
Copy link
Copy Markdown
Collaborator

this is an infrastructure problem, java exception

@jan-cerny
Copy link
Copy Markdown
Collaborator

@openscap-ci test this please

@jan-cerny
Copy link
Copy Markdown
Collaborator

@mildas Is it related to #7017 ?

@mildas
Copy link
Copy Markdown
Contributor Author

mildas commented May 26, 2021

@jan-cerny aha. Yes, it's related. Thanks for noticing, I will close this PR and continue in other pr discussion.

@mildas mildas closed this May 26, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants