dev-sec / dev-sec/chef-ssh-hardening
policycoreutils-python-utils not found on Amazon Linux 1
Nobody has claimed this yet.
- Dominant language
- Ruby
- Stars
- 168
- Forks
- 66
- Avg merge
- 9h 10m
- Merged PRs (30d)
- 2
Description
Describe the bug
SSH hardening regressed on Amazon Linux 1, no package policycoreutils-python-utils exists.
Expected behavior
Cookbook completes w/o error.
Actual behavior
Chef::Exceptions::Package
-------------------------
No candidate version available for policycoreutils-python-utils
Resource Declaration:
---------------------
# In /var/chef/cache/cookbooks/ssh-hardening/recipes/server.rb
59: package node['ssh-hardening']['selinux']['package']
60:
OS / Environment
Amazon Linux 1, AMI name amzn-ami-hvm-2018.03.0.20191219.0-x86_64-gp2
Chef Version
Chef: 12.22.3
Cookbook Version
2.9.0
Additional context
I believe the regression was introduced here: https://github.com/dev-sec/chef-ssh-hardening/commit/9cc66c97d29b54ff3937345b785953b57d8d3170
Version 2.8.0 does not have this problem.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in recipes/server.rb at the package declaration on lines 59-60, then compare the package-selection change from commit 9cc66c97d29b54ff3937345b785953b57d8d317 with version 2.8.0. Reproduce the failure on Amazon Linux 1 and verify that the cookbook completes without requesting the unavailable policycoreutils-python-utils package.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux, ruby
- Domain
- devops, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100