We discussed this idea internally as well, and we came up with the following reasons to not go further with it:
- why remove something we already have? there is no harm in keeping it - ansible is problematic on rhel6 due to python version - --remediate would stop working - bash is mentioned in the XCCDF spec, ansible @system is something we made up - in RHEL8 we could have ansible as default system for remediation ----- Original Message ----- From: "Shawn Wells" <[email protected]> To: [email protected] Sent: Wednesday, August 2, 2017 1:40:18 AM Subject: Re: Time to drop bash remediations? On 8/1/17 7:25 PM, Gabe Alford wrote: > I say we keep bash scripts as other distros will probably need them. > Plus, I would think that we would want to handle environments where > ansible will never be used. Psh.... what other Linux distros? =P You're totally right. And that definitely means we need to continue carrying bash remediations. _______________________________________________ scap-security-guide mailing list -- [email protected] To unsubscribe send an email to [email protected] _______________________________________________ scap-security-guide mailing list -- [email protected] To unsubscribe send an email to [email protected]
