[Clip] clip.ks and setools package

[Gallucci, John (US SSA)]

The packages under "Remove Packages for PL4 Compliance" needs to be updated.  Last month I submitted a modified kickstart configuration for review and have yet to receive any feedback.  About 90% of the packages that are being explicitly removed are not installed in the first place.  This is due to the fact that the package groups are commented out (the sections with the @).  Because the groups are not installed, it is not necessary to explicitly remove these packages.  I imagine these were just left behind in case someone wanted to enable a packages (e.g. base-x) and needed to know which ones from that group need to be removed.

Since this form isn't attachment friendly, below is the package section for the modified kickstart I have suggested.  In my testing this truncated kickstart yields the same package installation footprint as the original clip.ks file.

-----------------begin section of clip.ks-------------------------
# Install Packages.  This is site specific.
%packages
@base

#########################
# Add Packages for CLIP #
#########################
aide
audit
policycoreutils-newrole
ruby
setools
sysstat
vlock

#####################################
# Remove tcpdump per STIG gen003865 #
#####################################
-tcpdump

############################################
# Remove (BASE) Packages for PL4 compliance#
############################################
-NetworkManager
-autofs
-bluez-utils
-finger
-irda-utils
-nfs-utils
-rsh
-telnet
-wireless-tools
-ypbind
-yum-updatesd
----------------end section of clip.ks---------------------------

John Gallucci IV | Senior Systems Engineer
Phone: 858.592.5499 | Cell: 858.776.6820
BAE Systems, Inc., Information Solutions
10920 Technology Pl. | San Diego, CA 92129

-----Original Message-----
From: clip-bounces at oss.tresys.com [mailto:clip-bounces at oss.tresys.com] On Behalf Of Ted Toth
Sent: Monday, April 25, 2011 2:26 PM
To: clip at oss.tresys.com
Subject: [Clip] clip.ks and setools package

Why does the kickstart include and then exclude the setools package?

Ted
_______________________________________________
Clip mailing list
Clip at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/clip