From a3a3a9466d38ad6ab7a6e4c32f3f60eb823e9ad1 Mon Sep 17 00:00:00 2001 From: Carlos Rodriguez-Fernandez Date: Wed, 7 Aug 2024 13:52:38 -0700 Subject: [PATCH] include missing rpm pkg managers Signed-off-by: Carlos Rodriguez-Fernandez --- nist/system/ksp-nist-cm-5-3-cm-14-signed-components.yaml | 3 +++ nist/system/ksp-nist-cm-7-5-software-install.yaml | 6 ++++++ ...i-4-execute-package-management-process-in-container.yaml | 3 +++ 3 files changed, 12 insertions(+) diff --git a/nist/system/ksp-nist-cm-5-3-cm-14-signed-components.yaml b/nist/system/ksp-nist-cm-5-3-cm-14-signed-components.yaml index 6eefca18..f95d2c11 100644 --- a/nist/system/ksp-nist-cm-5-3-cm-14-signed-components.yaml +++ b/nist/system/ksp-nist-cm-5-3-cm-14-signed-components.yaml @@ -20,6 +20,9 @@ spec: matchPaths: - path: /usr/sbin/alternatives - path: /usr/bin/dnf + - path: /usr/bin/dnf-3 + - path: /usr/bin/dnf5 + - path: /usr/bin/microdnf - path: /usr/bin/rpm - path: /usr/bin/yum - path: /usr/bin/rpmkeys diff --git a/nist/system/ksp-nist-cm-7-5-software-install.yaml b/nist/system/ksp-nist-cm-7-5-software-install.yaml index 730d74f7..b96fc798 100644 --- a/nist/system/ksp-nist-cm-7-5-software-install.yaml +++ b/nist/system/ksp-nist-cm-7-5-software-install.yaml @@ -42,6 +42,12 @@ spec: ownerOnly: true - path: /usr/bin/dnf ownerOnly: true + - path: /usr/bin/dnf-3 + ownerOnly: true + - path: /usr/bin/dnf5 + ownerOnly: true + - path: /usr/bin/microdnf + ownerOnly: true - path: /bin/dnf ownerOnly: true - path: /usr/bin/pacman diff --git a/nist/system/ksp-nist-si-4-execute-package-management-process-in-container.yaml b/nist/system/ksp-nist-si-4-execute-package-management-process-in-container.yaml index f8f7a632..fc221436 100644 --- a/nist/system/ksp-nist-si-4-execute-package-management-process-in-container.yaml +++ b/nist/system/ksp-nist-si-4-execute-package-management-process-in-container.yaml @@ -33,6 +33,9 @@ spec: - path: /bin/rpm - path: /usr/bin/dnf - path: /bin/dnf + - path: /usr/bin/dnf-3 + - path: /usr/bin/dnf5 + - path: /usr/bin/microdnf - path: /usr/bin/pacman - path: /usr/sbin/pacman - path: /bin/pacman