Remove disable_prelink rule from Fedora and RHEL8 profiles

matusmarhefka · matusmarhefka · commit 343f85e58728 · 2020-10-22T16:30:15.000+02:00
The `prelink` package doesn't exist in Fedora/RHEL8 anymore. It has
been replaced with the `execstack` package which is built from
`prelink` sources but contains just the `execstack` binary.
Therefore, removing the rule from Fedora and RHEL8 profiles.
diff --git a/fedora/profiles/pci-dss.profile b/fedora/profiles/pci-dss.profile
@@ -84,7 +84,6 @@ selections:
     - rsyslog_files_groupownership
     - ensure_logrotate_activated
     - package_aide_installed
-    - disable_prelink
     - aide_build_database
     - aide_periodic_cron_checking
     - account_unique_name
diff --git a/fedora/profiles/standard.profile b/fedora/profiles/standard.profile
@@ -7,7 +7,6 @@ description: |-
     Regardless of your system's workload all of these checks should pass.
 
 selections:
-    - disable_prelink
     - aide_build_database
     - ensure_gpgcheck_globally_activated
     - ensure_gpgcheck_never_disabled
diff --git a/linux_os/guide/system/software/integrity/disable_prelink/rule.yml b/linux_os/guide/system/software/integrity/disable_prelink/rule.yml
@@ -1,5 +1,7 @@
 documentation_complete: true
 
+prodtype: ol7,ol8,rhel6,rhel7,rhv4,sle15
+
 title: 'Disable Prelinking'
 
 description: |-
diff --git a/rhel8/profiles/cjis.profile b/rhel8/profiles/cjis.profile
@@ -128,7 +128,6 @@ selections:
     - var_password_pam_ucredit=1
     - var_password_pam_lcredit=1
     - package_aide_installed
-    - disable_prelink
     - aide_build_database
     - aide_periodic_cron_checking
     - rpm_verify_permissions
diff --git a/rhel8/profiles/pci-dss.profile b/rhel8/profiles/pci-dss.profile
@@ -90,7 +90,6 @@ selections:
     - rsyslog_files_groupownership
     - ensure_logrotate_activated
     - package_aide_installed
-    - disable_prelink
     - aide_build_database
     - aide_periodic_cron_checking
     - account_unique_name
