product: rhcos4
full_name: Red Hat Enterprise Linux CoreOS 4
type: platform

benchmark_id: RHCOS-4
benchmark_root: "../../linux_os/guide"

profiles_root: "./profiles"

pkg_manager: "dnf"

init_system: "systemd"

reference_uris:
  stigid: 'https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform'

groups:
  dedicated_ssh_keyowner:
    name: ssh_keys

sshd_distributed_config: "true"

# Enable runtime sshd configuration checking for compliance operator scans
# Compliance Operator fetches the result of sshd -T and stores it in a file
sshd_runtime_check: "true"

cpes_root: "../../shared/applicability"
cpes:
  - rhcos4:
      name: "cpe:/o:redhat:enterprise_linux_coreos:4"
      title: "Red Hat Enterprise Linux CoreOS 4"
      check_id: installed_OS_is_rhcos4

# Mapping of CPE platform to package
platform_package_overrides:
  login_defs: "shadow-utils"

# The fingerprints below are retrieved from https://access.redhat.com/security/team/key
pkg_release: "4ae0493b"
pkg_version: "fd431d51"

release_key_fingerprint: "567E347AD0044ADE55BA8A5F199E2F91FD431D51"
