RHSecurityCompliance / contest

Content Testing for ComplianceAsCode/content
Other
4 stars 7 forks source link

Test typical OS usage after remediation #65

Open mildas opened 1 year ago

mildas commented 1 year ago

On hardened system, perform typical OS commands as:

The idea:

  1. Remediate system
  2. Perform some of the tasks
  3. Scan the system and confirm it passes

The reasons are to check if system is sane and to check typical OS usage doesn't break hardening.

comps commented 8 months ago

This should probably also include logging in as a regular unprivileged user. https://issues.redhat.com/browse/RHEL-24450

Also, we'll have to come up with some way of utilizing our existing /hardening tests for this, ie.

Or something like that.

Or maybe just some "test typical usage" function in lib that gets executed from all /hardening tests, though I don't like increasing the result scope of the hardening tests (adding non-rule results to TMT results).

Either way, we shouldn't re-run the hardening tests just to run something extra, we should re-use the state they set up.