Skip to content

SLE16 enable selinux and grub rules #14045

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 4 commits into from
Nov 10, 2025
Merged

SLE16 enable selinux and grub rules #14045

merged 4 commits into from
Nov 10, 2025
+19 −13

Conversation

@teacup-on-rockingchair
Copy link
Contributor

@teacup-on-rockingchair teacup-on-rockingchair commented Oct 26, 2025

Description:

  • Enable/fix for sle16 platform rules:
    • package_libselinux_installed
    • no_shelllogin_for_systemaccounts
    • grub2_spectre_v2_argument
    • grub2_nosmep_argument_absent
    • grub2_audit_argument

Rationale:

  • Fix/enable grub2 arguments macros for sle16
  • Fix login_defs path for sle16
  • Configure package_libselinux for sle16 platform

@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Used by openshift-ci bot. label Oct 26, 2025
@openshift-ci
Copy link

openshift-ci bot commented Oct 26, 2025

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@teacup-on-rockingchair teacup-on-rockingchair added Ansible Ansible remediation update. Bash Bash remediation update. labels Oct 26, 2025
@teacup-on-rockingchair teacup-on-rockingchair added this to the 0.1.79 milestone Oct 26, 2025
@teacup-on-rockingchair
Copy link
Contributor Author

teacup-on-rockingchair commented Oct 26, 2025

/ok-to-test

@openshift-ci openshift-ci bot added the ok-to-test Used by openshift-ci bot. label Oct 26, 2025
svet-se
svet-se approved these changes Nov 10, 2025
View reviewed changes
Copy link
Contributor

@svet-se svet-se left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

@teacup-on-rockingchair teacup-on-rockingchair marked this pull request as ready for review November 10, 2025 15:18
@teacup-on-rockingchair teacup-on-rockingchair requested a review from a team as a code owner November 10, 2025 15:18
@openshift-ci openshift-ci bot removed the do-not-merge/work-in-progress Used by openshift-ci bot. label Nov 10, 2025
@svet-se svet-se added the SLES SUSE Linux Enterprise Server product related. label Nov 10, 2025
@openshift-ci
Copy link

openshift-ci bot commented Nov 10, 2025

@teacup-on-rockingchair: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-aws-openshift-platform-compliance ce8d261 link true /test e2e-aws-openshift-platform-compliance
ci/prow/e2e-aws-openshift-node-compliance ce8d261 link true /test e2e-aws-openshift-node-compliance

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@teacup-on-rockingchair teacup-on-rockingchair merged commit 69c1403 into ComplianceAsCode:master Nov 10, 2025
138 of 140 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@svet-se svet-se svet-se approved these changes

Assignees

No one assigned

Labels

Ansible Ansible remediation update. Bash Bash remediation update. ok-to-test Used by openshift-ci bot. SLES SUSE Linux Enterprise Server product related.

Projects

None yet

Milestone

0.1.79

Development

Successfully merging this pull request may close these issues.

2 participants

@teacup-on-rockingchair @svet-se