xccdf_org.ssgproject.content_rule_aide_build_database fails on Fedora even if database exist

[sandrobonazzola]

Description of problem:

I followed ths intructions given in xccdf_org.ssgproject.content_rule_aide_build_database remediation on Fedora 40:

/usr/sbin/aide --init
/bin/cp -p /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz

but the test still fails.

I saw in ./linux_os/guide/system/software/integrity/software-integrity/aide/aide_build_database/tests/new_db_not_present.pass.sh that aftger the initial copy of the db there's a removal of the new database. I tried that as well but the test still fails.

The results are:

---

OVAL test results details

package aide is installed  oval:ssg-test_package_aide_installed:tst:1  true

Following items have been found on the system:

Result of item-state comparison	Name	Arch	Epoch	Release	Version	Evr	Signature keyid	Extended name
not evaluated	aide	x86_64	(none)	4.fc40	0.18.6	0:0.18.6-4.fc40	0727707ea15b79cc	aide-0:0.18.6-4.fc40.x86_64

Testing existence of operational aide database file  oval:ssg-test_aide_operational_database_absolute_path:tst:1  false

No items have been found conforming to the following objects:

Object oval:ssg-object_aide_operational_database_absolute_path:obj:1 of type file_object

Filepath
Referenced variable has no values (oval:ssg-variable_aide_operational_database_absolute_path:var:1)

---

SCAP Security Guide Version:

$ rpm -qv scap-security-guide
scap-security-guide-0.1.75-1.fc40.noarch

Operating System Version:

$ cat /etc/os-release 
NAME="Fedora Linux"
VERSION="40 (Workstation Edition)"
ID=fedora
VERSION_ID=40
VERSION_CODENAME=""
PLATFORM_ID="platform:f40"
PRETTY_NAME="Fedora Linux 40 (Workstation Edition)"
ANSI_COLOR="0;38;2;60;110;180"
LOGO=fedora-logo-icon
CPE_NAME="cpe:/o:fedoraproject:fedora:40"
DEFAULT_HOSTNAME="fedora"
HOME_URL="https://fedoraproject.org/"
DOCUMENTATION_URL="https://docs.fedoraproject.org/en-US/fedora/f40/system-administrators-guide/"
SUPPORT_URL="https://ask.fedoraproject.org/"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=40
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=40
SUPPORT_END=2025-05-13
VARIANT="Workstation Edition"
VARIANT_ID=workstation

Steps to Reproduce:

1. run the report

 sudo oscap xccdf eval \
    --fetch-remote-resources \
    --local-files /tmp/resources/ \
    --profile xccdf_org.ssgproject.content_profile_standard \
    --report report.html \
    /usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml

2. follow instructions:

/usr/sbin/aide --init
/bin/cp -p /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz

3. run the report again

Actual Results:

xccdf_org.ssgproject.content_rule_aide_build_database keep failing

Expected Results:

xccdf_org.ssgproject.content_rule_aide_build_database should pass once the database is there

Additional Information/Debugging Steps: