Remove remaining dependencies on installed_OS_is_FIPS_certified #13757
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This commit will remove remaining references in extend_definition to rule installed_OS_is_FIPS_certified. This is a follow up on the removal that has been done in
#13594.
Affected rules are failing
because of installed_OS_is_FIPS_certified was evaluated as false. The problem is that the rule installed_OS_is_FIPS_certified doesn't make sense because OS can't be ceritified by FIPS, instead specific cryptography modules are FIPS certified. The modules need to be of a specific version of the cryptography library, so the check shouldn't be tied to a OS major version For information about FIPS certified cryptography modules in Red Hat products, see: https://access.redhat.com/compliance/fips
For checking FIPS compliance status we have a different rule enable_fips_mode, if this rule is included in the profile we don't need to inject any checks to other rules.
Another factor is that the rule installed_OS_is_FIPS_certified fails on RHEL 9 and 10 because the list hasn't been updated which means the dependent rules always failed on these systems.
This change affects rules:
Resolves: https://issues.redhat.com/browse/RHEL-81743