Description of problem:

The test echoes the config option just fine,

##### coredump_disable_storage / coredumps_storage_none.pass.sh #####
ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o IdentityFile=/var/lib/libvirt/images/contest.sshkey [email protected] cd /root/ssgts/coredump_disable_storage; SHARED=/root/ssgts/shared bash -x coredumps_storage_none.pass.sh
STDERR: Warning: Permanently added '192.168.120.180' (ED25519) to the list of known hosts.
+ echo Storage=none

but then oscap fails to find it via a regexp match (see ARF).

My guess is that the lack of a default coredump.conf causes the [Coredump] header to not be present, and the test only appends to the end of the file,

echo Storage=none >> /etc/systemd/coredump.conf

So that this line becomes the only line in the newly-created coredump.conf.

OVAL then fails to find the [Coredump] header and fails.

SCAP Security Guide Version:

master @ 1424df5

Operating System Version:

RHEL-10

Additional Information/Debugging Steps:

• ARF: initial-arf.xml.gz