{"description": "Make sure that <tt>/boot/bootmap</tt> is up to date.<br />\nEvery time a boot entry or zIPL configuration is changed <tt>/boot/bootmap</tt> needs to\nbe updated to reflect the changes.<br />\nRun <tt>zipl</tt> command to generate an updated <tt>/boot/bootmap</tt>.", "rationale": "The file <tt>/boot/bootmap</tt> contains all boot data, keeping it up to date is crucial to\nboot correct kernel and options.", "severity": "medium", "references": {"ospp": ["FPT_TST_EXT.1"]}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": "the bootmap is outdated", "ocil": "Make sure that <tt>/boot/bootmap</tt> is newer than <tt>/boot/loader/entries/*.conf</tt>\nand <tt>/etc/zipl.conf</tt>:\n<pre>find /boot/loader/entries/*.conf /etc/zipl.conf -newer /boot/bootmap</pre>\nNo line should be returned, if a line is returned <tt>/boot/bootmap</tt> is outdated and needs to be regenerated.", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": "machine", "platforms": ["machine"], "sce_metadata": {}, "inherited_platforms": ["s390x_arch"], "cpe_platform_names": ["machine"], "inherited_cpe_platform_names": ["s390x_arch"], "bash_conditional": null, "fixes": {}, "title": "Ensure zIPL bootmap is up to date", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/bootloader-zipl/zipl_bootmap_is_up_to_date/rule.yml", "template": null}