We discussed this idea internally as well, and we came up with the following reasons to
not go further with it:
- why remove something we already have? there is no harm in keeping it
- ansible is problematic on rhel6 due to python version
- --remediate would stop working
- bash is mentioned in the XCCDF spec, ansible @system is something we made up
- in RHEL8 we could have ansible as default system for remediation
----- Original Message -----
From: "Shawn Wells" <shawn(a)redhat.com>
To: scap-security-guide(a)lists.fedorahosted.org
Sent: Wednesday, August 2, 2017 1:40:18 AM
Subject: Re: Time to drop bash remediations?
On 8/1/17 7:25 PM, Gabe Alford wrote:
I say we keep bash scripts as other distros will probably need them.
Plus, I would think that we would want to handle environments where
ansible will never be used.
Psh.... what other Linux distros? =P
You're totally right. And that definitely means we need to continue
carrying bash remediations.
_______________________________________________
scap-security-guide mailing list -- scap-security-guide(a)lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave(a)lists.fedorahosted.org