ComplianceAsCode / ComplianceAsCode/content
xccdf_org.ssgproject.content_rule_aide_build_database fails on Fedora even if database exist
- Dominant language
- Shell
- Stars
- 2.8k
- Forks
- 828
- Avg merge
- 3d 8m
- Merged PRs (30d)
- 80
Description
#### Description of problem:
I followed ths intructions given in `xccdf_org.ssgproject.content_rule_aide_build_database` remediation on Fedora 40:
```console
/usr/sbin/aide --init
/bin/cp -p /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz
```
but the test still fails.
I saw in `./linux_os/guide/system/software/integrity/software-integrity/aide/aide_build_database/tests/new_db_not_present.pass.sh` that aftger the initial copy of the db there's a removal of the new database. I tried that as well but the test still fails.
The results are:
OVAL test results details
package aide is installed
oval:ssg-test_package_aide_installed:tst:1
true
Following items have been found on the system:
Result of item-state comparisonNameArchEpochReleaseVersionEvrSignature keyidExtended namenot evaluatedaidex86_64(none)4.fc400.18.60:0.18.6-4.fc400727707ea15b79ccaide-0:0.18.6-4.fc40.x86_64Testing existence of operational aide database file
oval:ssg-test_aide_operational_database_absolute_path:tst:1
false
No items have been found conforming to the following objects:
Object oval:ssg-object_aide_operational_database_absolute_path:obj:1 of type
file_object
FilepathReferenced variable has no values (oval:ssg-variable_aide_operational_database_absolute_path:var:1)#### SCAP Security Guide Version:
```console
$ rpm -qv scap-security-guide
scap-security-guide-0.1.75-1.fc40.noarch
```
#### Operating System Version:
```console
$ cat /etc/os-release
NAME="Fedora Linux"
VERSION="40 (Workstation Edition)"
ID=fedora
VERSION_ID=40
VERSION_CODENAME=""
PLATFORM_ID="platform:f40"
PRETTY_NAME="Fedora Linux 40 (Workstation Edition)"
ANSI_COLOR="0;38;2;60;110;180"
LOGO=fedora-logo-icon
CPE_NAME="cpe:/o:fedoraproject:fedora:40"
DEFAULT_HOSTNAME="fedora"
HOME_URL="https://fedoraproject.org/"
DOCUMENTATION_URL="https://docs.fedoraproject.org/en-US/fedora/f40/system-administrators-guide/"
SUPPORT_URL="https://ask.fedoraproject.org/"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=40
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=40
SUPPORT_END=2025-05-13
VARIANT="Workstation Edition"
VARIANT_ID=workstation
```
#### Steps to Reproduce:
1. run the report
```console
sudo oscap xccdf eval \
--fetch-remote-resources \
--local-files /tmp/resources/ \
--profile xccdf_org.ssgproject.content_profile_standard \
--report report.html \
/usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml
```
2. follow instructions:
```console
/usr/sbin/aide --init
/bin/cp -p /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz
```
3. run the report again
#### Actual Results:
xccdf_org.ssgproject.content_rule_aide_build_database keep failing
#### Expected Results:
xccdf_org.ssgproject.content_rule_aide_build_database should pass once the database is there
#### Additional Information/Debugging Steps:
Contributor guide
Assessment
This issue has not been assessed yet.