NIAP OSPP/Draft RHEL8 STIG ansible plays - disabled options for virtual guests and docker containers

2020-02-11 Thread Link, Henry L II CTR USN NIWC ATLANTIC SC (USA)
Good afternoon! I am new to this list, and would normally lurk a bit more first, but I have a question I am hoping the community might be able to help me with. I have been reviewing the ansible playbook content for the NIAP OSPP for RHEL 8 on the following site:

Re: NIAP OSPP/Draft RHEL8 STIG ansible plays - disabled options for virtual guests and docker containers

2020-02-11 Thread Gabe Alford
ansible_virtualization_role != "guest" should never have been added as all of the rules of a physical machine apply to a virtual machine. However, keeping `ansible_virtualization_type != "docker"` makes sense because many of controls don't make sense for containers themselves. There is a bug open