diff options
| author | Kristin Chuang <kristin.chuang@canonical.com> | 2021-06-30 18:12:47 +0800 |
|---|---|---|
| committer | Kristin Chuang <kristin.chuang@canonical.com> | 2021-06-30 18:12:47 +0800 |
| commit | 8b80db367ebb6cb02acae79c49ef8c90a1823572 (patch) | |
| tree | 698ae8c9a589485cd9f164513de7d98c1f10aa27 /units/image | |
| parent | 3abf9457832382acac47e36b73a1aea7e65e1cc6 (diff) | |
Change: check correctness of model grade instead of just checking if it's not set to 'dangerous'
Diffstat (limited to 'units/image')
| -rw-r--r-- | units/image/jobs.pxu | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/units/image/jobs.pxu b/units/image/jobs.pxu index d185550..d5aa7d4 100644 --- a/units/image/jobs.pxu +++ b/units/image/jobs.pxu @@ -71,16 +71,18 @@ command: estimated_duration: 2.0 flags: preserve-locale -id: image/model-grade-not-dangerous +id: image/model-grade category_id: image -_summary: Check that the model grade is not missing or set to dangerous +_summary: Check that the model grade is correctly set requires: lsb.distributor_id == "Ubuntu Core" and int(lsb.release) >= 20 _description: Images with the 'dangerous' grade (the lowest of all available grades) results in certain security measures to be relaxed. Images that require strict security related implementations must - have the model grade set to a grade higher than 'dangerous'. + have the model grade set to non-dangerous grades - either the highest + grade of 'secured', or a grade passed to checkbox for checking via the + MODEL_GRADE configuration variable. plugin: shell command: ubuntucore_image_checks.py model-grade |