diff --git a/Sanity/ansible-machine-hardening/runtest.sh b/Sanity/ansible-machine-hardening/runtest.sh index e7a7abf..423dc18 100755 --- a/Sanity/ansible-machine-hardening/runtest.sh +++ b/Sanity/ansible-machine-hardening/runtest.sh @@ -17,10 +17,12 @@ TIMESTAMP_FILE="/test_timestamp" # The nfs-utils and gssproxy packages are beakerlib dependencies and cannot be # removed. The accounts_password_set_max_life_existing rule requires password # change after hardening, skip it unselect mount_option as we can't remediate it. +# Rsync is required by tmt, don't remove it from machine. EXTENDED_LIST="xccdf_org.ssgproject.content_rule_package_nfs-utils_removed xccdf_org.ssgproject.content_rule_package_gssproxy_removed xccdf_org.ssgproject.content_rule_accounts_password_set_max_life_existing -xccdf_org.ssgproject.content_rule_mount_option_.*" +xccdf_org.ssgproject.content_rule_mount_option_.* +xccdf_org.ssgproject.content_rule_package_rsync_removed" # On CentOS, exclude rules that check if OS is FIPS certified if rlIsCentOS; then diff --git a/Sanity/machine-hardening/runtest.sh b/Sanity/machine-hardening/runtest.sh index a87ae6a..722a4fc 100755 --- a/Sanity/machine-hardening/runtest.sh +++ b/Sanity/machine-hardening/runtest.sh @@ -17,10 +17,12 @@ TIMESTAMP_FILE="/test_timestamp" # The nfs-utils and gssproxy packages are beakerlib dependencies and cannot be # removed. The accounts_password_set_max_life_existing rule requires password # change after hardening, skip it unselect mount_option as we can't remediate it. +# Rsync is required by tmt, don't remove it from machine. EXTENDED_LIST="xccdf_org.ssgproject.content_rule_package_nfs-utils_removed xccdf_org.ssgproject.content_rule_package_gssproxy_removed xccdf_org.ssgproject.content_rule_accounts_password_set_max_life_existing -xccdf_org.ssgproject.content_rule_mount_option_.*" +xccdf_org.ssgproject.content_rule_mount_option_.* +xccdf_org.ssgproject.content_rule_package_rsync_removed" # On CentOS, exclude rules that check if OS is FIPS certified if rlIsCentOS; then