Jan Lieskovsky

[RFE] Add ability to run system scan / system remediation under sudo

7

Description of problem: The STIG profile in SSG content contains the following rule "Disable SSH Root Login":     [1] https://fedorapeople.org/~jlieskov/rhel6-guide.html#item-sshd_disable_root_login The purpose of this rule is to check if...

[RFE] Please provide "Remediate Dry Run" button / checkbox

5

Upon a system's feature failure reported by scan SCAP Security Guide users are faced the need to perform the remediation. Since this might seem like risky operation on the production...

The SCAP Workbench tool currently supports SCAP content customization / tailoring (selecting only of a subset of rules from particular benchmark applicable to concrete host). There might be use-cases where...

[RFE] Briefly scan provided XCCDF file to determine if underlying CPEs are known to oscap. If not, display a file open dialog user to specify which CPE dictionary file should be used during scan

1

Description of problem:     The `oscap` command line tool supports `--cpe` argument the user to specify which CPE dictionary should be used for applicability checks. AFAICT right now there...

When pushing SPC openscap-daemon Docker images to Docker hub, please sign them

1

Docker starting from 1.8 introduced concept of Docker Content Trust (The Update Framework): - https://blog.docker.com/2015/08/content-trust-docker-1-8/ which allows images to be signed when publishing to Docker hub. The consumers can later...

[CIAM-800] Fix the failing com.redhat.xpaas.sso.ImageTest.testDeclaredEnvironmentVariables test

2

[CIAM-800] Fix the failing com.redhat.xpaas.sso.ImageTest.testDeclaredEnvironmentVariables test -- the JAVA_HOME and JAVA_VENDOR environment variables are expected to be defined this test to pass The latest JBoss EAP 7.4 with OpenJDK11 for...

[CIAM-2881] Add a demo on how to rebuild default RH-SSO 7.5.X image to start using latest IBM Semeru 11 JDK. Also add a script to (re)generate the templates to use the new image stream

3

[CIAM-2881] Add a demo on how to rebuild the standard Red Hat Single Sign-On 7.5 container image to start using the latest version of IBM Semeru 11 Open Edition JDK...

## Bug Report **What did you do?** Given the standard OLM `ClusterRole` definition [is pretty wide](https://github.com/operator-framework/operator-lifecycle-manager/blob/master/deploy/chart/templates/0000_50_olm_01-olm-operator.serviceaccount.yaml#L6) (meaning the asterisk notation in `resources:` and `verbs:` fields ATM), we are using list...

[OLM install method] [Trivial fix] Verb "list" for "(mutating|validating)webhookconfigurations" resources in API group "admissionregistration.k8s.io" missing in clusterPermissions: section of argocd-operator.<tag>.clusterserviceversion.yaml CSV file?

2

**Describe the bug** Hello, firstly, thank you for the great operator! Secondly, given the [default OLM cluster role is overly strong](https://github.com/operator-framework/operator-lifecycle-manager/blob/master/deploy/chart/templates/0000_50_olm_01-olm-operator.serviceaccount.yaml#L6), leading to [associated security concern](https://github.com/operator-framework/operator-lifecycle-manager/issues/1685), in order to install...