chronyd_or_ntpd_set_maxpoll doesn't pass on RHEL 8 STIG about content

[vojtapolasek]

This is observed for RHEL 9 as well.

[vojtapolasek]

This problem no longer appears since eb2f364 .

[mildas]

Double remediation fixes the problem. During first remediation, it passes. But second remediation finds it failing and thus remediates it. After that it passes and seems ok. I will remove the waiver and close the issue, do you agree @vojtapolasek ?

[vojtapolasek]

I mean... I would be interested why it fails during the second step... do we know that? Do we know what fixes the fail?

[vojtapolasek]

I can confirm this issue is solved by two remediations. This issue appears in case tha there are no server or pool directives defined in /etc/chrony.conf prior the first remediation.
The issue happens as follows, thanks @comps for finding it out:

1. Evaluation is performed. The rule chronyd_or_ntpd_set_maxpoll passes because there is no pool or server entry defined. The rule chronyd_specify_remote_server fails because of the same reason.
2. remediation is performed. Only the rule chronyd_specify_remote_server gets remediated because it failed in the previous step. But the rule chronyd_or_ntpd_set_maxpoll starts failing because the remediation of the rule chronyd_specify_remote_server does not include the maxpoll option.
3. Second evaluation and remediation is performed. The rule chronyd_or_ntpd_set_maxpoll is shown as failing and is subsequently remediated. Now it should stabilize.

I think this could be fixed by manipulating rule ordering.

[vojtapolasek]

After further investigation, I realized this can't be fixed on our side. Double remediation is required.