Automatus grub2_enable_fips_mode/grub_cmdline_linux_correct_value.pass fails on RHEL-10

[comps]

Description of problem:

The test does

##### grub2_enable_fips_mode / grub_cmdline_linux_correct_value.pass.sh #####
ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o IdentityFile=/var/lib/libvirt/images/contest.sshkey [email protected] cd /root/ssgts/grub2_enable_fips_mode; SHARED=/root/ssgts/shared bash -x grub_cmdline_linux_correct_value.pass.sh
STDERR: Warning: Permanently added '192.168.120.180' (ED25519) to the list of known hosts.
+ grep -q '^GRUB_CMDLINE_LINUX=.*fips=.*"' /etc/default/grub
+ sed -i 's/\(^GRUB_CMDLINE_LINUX=".*\)"/\1 fips=1"/' /etc/default/grub

but the OVAL checks fail the overall rule (see ARF).

It's hard to say on cursory examination as the rule has a LOT of checks, but perhaps the test fails to add fips=1 to GRUB_CMDLINE_LINUX_DEFAULT which the OVAL also checks?

(Possibly something else.)

SCAP Security Guide Version:

master @ 1424df5

Operating System Version:

RHEL-10

Steps to Reproduce:

1. Run automatus scenarios for grub2_enable_fips_mode on RHEL-10

Additional Information/Debugging Steps:

• ARF: initial-arf.xml.gz