OSPP checks for vsyscall=none, audit_backlog_limit=8192, and audit=1 fail on EFI servers
Issue
- On EFI servers, the SCAP checks for
vsyscall=none,audit_backlog_limit=8192, andaudit=1are failing. - Why does openscap OSPP scan fail my UEFI systems for "Disable vsyscalls", "Enable Auditing for Processes Which Start Prior to the Audit Daemon" , and "Extend Audit Backlog Limit for the Audit Daemon" when
/boot/efi/EFI/redhat/grub.cfghas the specified boot options?
Environment
- Red Hat Enterprise Linux 7
- EFI system
- SCAP profile applied
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
