Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unexpected Behavior related to STIGing a a host with a GUI #65

Open
PrymalInstynct opened this issue Nov 25, 2024 · 0 comments
Open

Unexpected Behavior related to STIGing a a host with a GUI #65

PrymalInstynct opened this issue Nov 25, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@PrymalInstynct
Copy link
Contributor

Describe the Issue
When applying the STIG to a host with the workstation-product-environment, graphical-server-environment, or gnome-desktop package groups installed the Gnome Desktop no longer starts after the system is rebooted.

Expected Behavior
The STIG is applied and the Gnome Desktop still works

Actual Behavior
You are dropped into a terminal after a reboot instead of the Gnome Login

Control(s) Affected
What controls are being affected by the issue

  • RHEL-09-211030
  • RHEL-09-215025
  • RHEL-09-215050
  • RHEL-09-215055
  • RHEL-09-215070

Environment (please complete the following information):

  • branch being used: devel
  • Ansible Version: 2.17.5
  • Host Python Version: 3.9.18
  • Ansible Server Python Version: 3.12.7
  • Additional Details:

Additional Notes
I know there is a variable (rhel9stig_gui) and tasks in prelim that determines if a GUI is installed so that the applicable STIGs can be applied, but this issue is not addressed by how that variable is currently being assigned

Possible Solution

  • Option 1) Add the rhel9stig_gui when condition to the tasks of the controls above. This makes the assumption that because a GUI is installed already it is approved to be there
  • Option 2) Create a new variable rhel9stig_approved_gui applying it to the Controls above. If the variable is true skip the tasks.

NOTE: Task RHEL-09-215070 uninstalls any xorg packages which is correct for the STIG but this leaves behind all of the gnome packages. It would probably be good to add a handler that cleans up the rest of GUI packages if RHEL-09-215070 returns a changed state. OR as a prelim task check if the workstation-product-environment, graphical-server-environment, or gnome-desktop groups are present and have RHEL-09-215070 uninstall the whole package group instead or just xorg if rhel9stig_approved_gui is false

@PrymalInstynct PrymalInstynct added the bug Something isn't working label Nov 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant