add some tests to kernel and services

osbuild · Feb 1, 2024 · 7b36c92 · 7b36c92
1 parent cc720b2
commit 7b36c92
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 0 deletions.
diff --git a/src/test/Components/CreateImageWizardV2/CreateImageWizard.compliance.test.tsx b/src/test/Components/CreateImageWizardV2/CreateImageWizard.compliance.test.tsx
@@ -154,6 +154,13 @@ describe('Step Compliance', () => {
         /cis red hat enterprise linux 8 benchmark for level 1 - workstation/i
       )
     );
+    await screen.getByText(/kernel:/i);
+    await screen.getByText(/audit_backlog_limit=8192 audit=1/i);
+    await screen.getByText(/disabled services:/i);
+    await screen.getByText(/nfs\-server/i);
+    await screen.getByText(/enabled services:/i);
+    await screen.getByText(/enabled services:/i);
+
     // check that the FSC contains a /tmp partition
     await clickNext();
     //    await screen.findByRole('heading', { name: /File system configuration/i });

diff --git a/src/test/fixtures/oscap.ts b/src/test/fixtures/oscap.ts
@@ -32,6 +32,13 @@ export const oscapCustomizations = (
         'nftables',
         'libselinux',
       ],
+      kernel: {
+        append: "audit_backlog_limit=8192 audit=1"
+      },
+      services: {
+        disabled: ["nfs-server"],
+        enabled:["crond"]
+      },
     };
   }
   if (profile === 'xccdf_org.ssgproject.content_profile_cis_workstation_l2') {
@@ -52,6 +59,13 @@ export const oscapCustomizations = (
         'nftables',
         'libselinux',
       ],
+      kernel: {
+        append: "audit_backlog_limit=8192 audit=1"
+      },
+      services: {
+        disabled: ["nfs-server","nftables"],
+        enabled:["crond","firewalld"]
+      },
     };
   }
   return {
@@ -70,5 +84,12 @@ export const oscapCustomizations = (
       'nftables',
       'libselinux',
     ],
+    kernel: {
+      append: "audit_backlog_limit=8192 audit=1"
+    },
+    services: {
+      disabled: ["nfs-server","rpcbind","autofs","nftables"],
+      enabled:["crond","firewalld","systemd-journald","rsyslog","auditd"]
+    },
   };
 };