Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use yescrypt in RHEL 10 #12743

Merged
merged 2 commits into from
Dec 20, 2024

Conversation

Mab879
Copy link
Member

@Mab879 Mab879 commented Dec 18, 2024

Description:

Use yescript in the RHEL 10 STIG.

Rationale:

The default in RHEL 10 is yescrypt and using SHA512 is causing issues with testing.

yescrypt is built using NIST-approved primitives see https://fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow for more details.

@Mab879 Mab879 added the Update Profile Issues or pull requests related to Profiles updates. label Dec 18, 2024
@Mab879 Mab879 added this to the 0.1.76 milestone Dec 18, 2024
Copy link

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment
Open in Gitpod

Oracle Linux 8 Environment
Open in Gitpod

@Mab879 Mab879 force-pushed the use_yescript_in_rhel10 branch from 99e556b to 5ac0805 Compare December 18, 2024 21:14
@Mab879 Mab879 changed the title Use yescript in RHEL 10 Use yescrypt in RHEL 10 Dec 18, 2024
@jan-cerny jan-cerny self-assigned this Dec 19, 2024
Copy link
Collaborator

@jan-cerny jan-cerny left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks aligned with CIS and PCI-DSS in RHEL 10.

@Mab879
Copy link
Member Author

Mab879 commented Dec 19, 2024

That's fun, ctest passed in GitHub CI but not in Testing Farm. I will have a fix up shortly.

Copy link

codeclimate bot commented Dec 19, 2024

Code Climate has analyzed commit 958743d and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 61.6% (0.0% change).

View more on Code Climate.

@Mab879 Mab879 requested a review from jan-cerny December 19, 2024 18:18
@jan-cerny jan-cerny merged commit e79c530 into ComplianceAsCode:master Dec 20, 2024
105 checks passed
@Mab879 Mab879 deleted the use_yescript_in_rhel10 branch December 20, 2024 13:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Update Profile Issues or pull requests related to Profiles updates.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants