File: system_with_kernel.yml

package info (click to toggle)
scap-security-guide 0.1.76-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 110,644 kB
  • sloc: xml: 241,883; sh: 73,777; python: 32,527; makefile: 27
file content (41 lines) | stat: -rw-r--r-- 1,829 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
name: cpe:/a:system_with_kernel
title: Bare-metal systems, virtual machines, bootc container images, running bootc systems
# Common platform for all systems that aren't containers
# Matches:
# - normal bare-metal systems or VMs
# - running bootc (RHEL Image Mode) systems
# - bootc (RHEL Image Mode) containers and container images
# Does not match:
# - classic containers and container images
#
# The matching platforms and non-matching platforms can be easily distinguished
# by checking for presence of the kernel RPM package. All matching platforms
# have in common that they contain kernel.
#
# In most cases, this platform is assigned to rules where the "machine" platform
# was set in past.
check_id: system_with_kernel
{{% if pkg_system == "rpm" %}}
{{% if "sle" in product or "slmicro" in product %}}
bash_conditional: "rpm --quiet -q kernel-default"
{{% elif "ol" in families %}}
bash_conditional: "rpm --quiet -q kernel || rpm --quiet -q kernel-uek"
{{% else %}}
bash_conditional: "rpm --quiet -q kernel"
{{% endif %}}
{{% else %}}
{{% if "debian" in product or "ubuntu" in product %}}
bash_conditional: "dpkg-query --show --showformat='${db:Status-Status}\n' 'linux-base' 2>/dev/null | grep -q ^installed"
{{% else %}}
bash_conditional: "dpkg-query --show --showformat='${db:Status-Status}\n' 'kernel' 2>/dev/null | grep -q ^installed"
{{% endif %}}
{{% endif %}}
{{% if "debian" in product or "ubuntu" in product %}}
ansible_conditional: '"linux-base" in ansible_facts.packages'
{{% elif "sle" in product or "slmicro" in product %}}
ansible_conditional: '"kernel-default" in ansible_facts.packages'
{{% elif "ol" in families %}}
ansible_conditional: '("kernel" in ansible_facts.packages or "kernel-uek" in ansible_facts.packages)'
{{% else %}}
ansible_conditional: '"kernel" in ansible_facts.packages'
{{% endif %}}