Skip to content

service_disabled: SCE check does not handle certain service states #14845

Description

@vojtapolasek

Description of problem:

In case of rules service_pcscd_enabled and service_systemd-journald_enabled, the SCE check does not pass any test scenarios, even after remediation.

SCAP Security Guide Version:

master as of ebf9917

Operating System Version:

RHEL 8, 9, 10

Steps to Reproduce:

Run per-rule/oscap/from-env with RULE= for appropriate rule

Actual Results:

All test scenarios fail.

Expected Results:

All test scenarios pass.

Additional Information/Debugging Steps:

I think the culprit lies in the fact that the check runs systemctl is-enabled and expects to receive "enabled".
But for example in case of pcscd, the command returns "indirect".

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions