Skip to content

Commit be2ab87

Browse files
dcasotaclaude
andcommitted
stigenable: drop redundant packages from KS_STIG_PACKAGES
Three of the eight entries are removed. Each is either already satisfied transitively or is dead weight: libselinux-utils already a dependency of selinux-policy, and the stig-hardening role never invokes any of its binaries ntp installed but never configured - no task in the role notifies the time-sync handlers, and 0 of the 117 PHTN-50-xxxxxx controls cover time sync libgcrypt a workaround for aide declaring only an unversioned Requires: libgcrypt; that belongs in aide.spec The same three are dropped from examples/ova/packages_stig.json, so the OVA package list and the installer's own list say the same thing. Keeping the two in step matters: a list restated in two places is how the media and the installer drifted apart in the first place. Verified on four real STIG installs - two on photon-os-installer 2.8, two on latest - whose manifests already carry the reduced additional_packages list [audit, rsyslog, openssl-fips-provider, selinux-policy, aide]: libselinux-utils-3.10-4.ph5 installed, transitively libgcrypt-1.10.4-2.ph5 installed, transitively ntp absent, and time sync works via systemd-timesyncd aide's dependency is now a versioned Requires: libgcrypt >= 1.10.4, confirmed in aide-0.19-3.ph5, so nothing rests on the unversioned form any more. Signed-off-by: Daniel Casota <dcasota@gmail.com> Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JW73JTCUGRcaNTUEQcAMtf
1 parent c5116e8 commit be2ab87

2 files changed

Lines changed: 2 additions & 6 deletions

File tree

examples/ova/packages_stig.json

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,8 +14,7 @@
1414
"less",
1515
"sudo",
1616
"lvm2",
17-
"audit", "rsyslog", "openssl-fips-provider", "selinux-policy",
18-
"libselinux-utils", "ntp", "aide", "libgcrypt"
17+
"audit", "rsyslog", "openssl-fips-provider", "selinux-policy", "aide"
1918
],
2019
"packages_x86_64": ["linux-esx"]
2120
}

photon_installer/stigenable.py

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,10 +23,7 @@
2323
"rsyslog",
2424
"openssl-fips-provider",
2525
"selinux-policy",
26-
"libselinux-utils",
27-
"ntp",
28-
"aide",
29-
"libgcrypt"
26+
"aide"
3027
]
3128

3229

0 commit comments

Comments
 (0)