As is, the check doesn't evaluate properly because linux:version is '6' and not '6.\d+'. This CPE works because it uses OpenSCAP's OVAL.
Signed-off-by: Rui Bernardino <[email protected]> --- RHEL/6/input/checks/installed_OS_is_rhel6.xml | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/RHEL/6/input/checks/installed_OS_is_rhel6.xml b/RHEL/6/input/checks/installed_OS_is_rhel6.xml index 0c61df5..60a8ac7 100644 --- a/RHEL/6/input/checks/installed_OS_is_rhel6.xml +++ b/RHEL/6/input/checks/installed_OS_is_rhel6.xml @@ -37,7 +37,7 @@ <linux:state state_ref="state_rhel_workstation" /> </linux:rpminfo_test> <linux:rpminfo_state id="state_rhel_workstation" version="1"> - <linux:version operation="pattern match">^6\.\d+$</linux:version> + <linux:version operation="pattern match">^6</linux:version> </linux:rpminfo_state> <linux:rpminfo_object id="obj_rhel_workstation" version="1"> <linux:name>redhat-release-workstation</linux:name> @@ -48,7 +48,7 @@ <linux:state state_ref="state_rhel_server" /> </linux:rpminfo_test> <linux:rpminfo_state id="state_rhel_server" version="1"> - <linux:version operation="pattern match">^6\.\d+$</linux:version> + <linux:version operation="pattern match">^6</linux:version> </linux:rpminfo_state> <linux:rpminfo_object id="obj_rhel_server" version="1"> <linux:name>redhat-release-server</linux:name> -- 1.7.1 -- Rui Pedro Bernardino CTE2 Aveiro PT Inovação e Sistemas _______________________________________________ scap-security-guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
