Install sequoia-sq Package

Description

The sequoia-sq package can be installed with the following command:

$ sudo dnf install sequoia-sq

Rationale

The sequoia-sq package provides the sq command-line tool, which is used for OpenPGP operations including verification of GPG signatures. This tool is required for cryptographic verification of software packages and GPG keys using modern OpenPGP implementations.

Remediation

Shell script

The following script can be run on the host to remediate the issue.

#!/bin/bash

# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel-core; then

if ! rpm -q --quiet "sequoia-sq" ; then
    dnf install -y "sequoia-sq"
fi

else
    >&2 echo 'Remediation is not applicable, nothing was done'
fi

Ansible playbook

The following playbook can be run with Ansible to remediate the issue.

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - CCE-86458-7
  - PCI-DSSv4-6.3
  - PCI-DSSv4-6.3.3
  - enable_strategy
  - low_complexity
  - low_disruption
  - low_severity
  - no_reboot_needed
  - package_sequoia-sq_installed

- name: Ensure sequoia-sq is installed
  ansible.builtin.package:
    name: sequoia-sq
    state: present
  when: '"kernel-core" in ansible_facts.packages'
  tags:
  - CCE-86458-7
  - PCI-DSSv4-6.3
  - PCI-DSSv4-6.3.3
  - enable_strategy
  - low_complexity
  - low_disruption
  - low_severity
  - no_reboot_needed
  - package_sequoia-sq_installed