STIG profile ssg-rhel7-xccdf enforces repo_gpgcheck=1 but neither CDN nor Satellite6 provide signed metadata

[ElCoyote27]

Title says it all.
I've opened this BZ to track this:
https://bugzilla.redhat.com/show_bug.cgi?id=1494234

It seems it's a known problem but I believe it should be fixed in our repos.
https://access.redhat.com/solutions/2850911

[shawndwells]

On 9/21/17 3:13 PM, Vincent S. Cojot wrote: Title says it all. I've opened this BZ to track this: https://bugzilla.redhat.com/show_bug.cgi?id=1494234

FYI - there are multiple open BZs against this issue Having Satellite sign repodata: https://bugzilla.redhat.com/show_bug.cgi?id=1410638 Having RedHat sign repo data: https://bugzilla.redhat.com/show_bug.cgi?id=1373331

It seems it's a known problem but I believe it should be fixed in our repos. https://access.redhat.com/solutions/2850911

DISA did not enforce this requirement on other operating systems, e.g. Ubuntu, so we're working to remove the requirement from the STIG entirely.

[ElCoyote27]

Thank you Shawn. This is a perfect answer. Thank you.