Commit 964162b
stigenable: drop redundant packages from KS_STIG_PACKAGES
Three of the eight entries are removed. Each is either already satisfied
transitively or is dead weight:
libselinux-utils already a dependency of selinux-policy, and the
stig-hardening role never invokes any of its binaries
ntp installed but never configured - no task in the role
notifies the time-sync handlers, and 0 of the 107
PHTN-50-xxxxxx controls cover time sync
libgcrypt a workaround for aide declaring only an unversioned
Requires: libgcrypt; that belongs in aide.spec
The same three are dropped from examples/ova/packages_stig.json, so the OVA
package list and the installer's own list say the same thing. Keeping the two
in step matters: a list restated in two places is how the media and the
installer drifted apart in the first place.
Verified on four real STIG installs - two on photon-os-installer 2.8, two on
latest - whose manifests carry the reduced additional_packages list
[audit, rsyslog, openssl-fips-provider, selinux-policy, aide]:
libselinux-utils installed, transitively
libgcrypt installed, transitively
ntp / ntpsec absent, and time sync works via
systemd-timesyncd
aide's dependency is now a versioned Requires: libgcrypt >= 1.10.4, confirmed
in aide-0.19-3.ph5, so nothing rests on the unversioned form any more.
Signed-off-by: Daniel Casota <dcasota@gmail.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JW73JTCUGRcaNTUEQcAMtf1 parent f614b59 commit 964162b
2 files changed
Lines changed: 2 additions & 6 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | | - | |
18 | | - | |
| 17 | + | |
19 | 18 | | |
20 | 19 | | |
21 | 20 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
26 | | - | |
27 | | - | |
28 | | - | |
29 | | - | |
| 26 | + | |
30 | 27 | | |
31 | 28 | | |
32 | 29 | | |
| |||
0 commit comments