From 20391dbc43857e6da8dafcf46bc818277602a811 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20=C4=8Cern=C3=BD?= Date: Tue, 3 Dec 2024 15:55:26 +0100 Subject: [PATCH] Change applicability of RPM verification rules This commit changes applicability of rules in the `rpm_verification` group, ie. `rpm_verify_hashes`, `rpm_verify_ownership`, `rpm_verify_permissions`. These rules will not be applicable on bootable containers - both during the image build and on the running RHEL Image Mode systems. The reason is a large difference in permissions and hashes caused by `rpm-ostree`. --- .../integrity/software-integrity/rpm_verification/group.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/group.yml b/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/group.yml index 557a2c8c79b..36fe68f5518 100644 --- a/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/group.yml +++ b/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/group.yml @@ -12,3 +12,5 @@ description: |- modification of important files. To list which files on the system differ from what is expected by the RPM database: 
$ rpm -qVa
See the man page for rpm to see a complete explanation of each column. + +platform: not bootc