Skip to content
Log In

Ensure zIPL bootmap is up to date

An XCCDF Rule

Description

Make sure that /boot/bootmap is up to date.
Every time a boot entry or zIPL configuration is changed /boot/bootmap needs to be updated to reflect the changes.
Run zipl command to generate an updated /boot/bootmap.

Rationale

The file /boot/bootmap contains all boot data, keeping it up to date is crucial to boot correct kernel and options.

ID
xccdf_org.ssgproject.content_rule_zipl_bootmap_is_up_to_date
Severity
Medium
References
Updated

Remediation Templates

A Shell Script

# Remediation is applicable only in certain platforms
if grep -q s390x /proc/sys/kernel/osrelease && { [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; }; then
/usr/sbin/zipl

else
    >&2 echo 'Remediation is not applicable, nothing was done'
fi

An Ansible Snippet

- name: Ensure zIPL bootmap is up to date
  block:
  - name: Obtain stats of /boot/bootmap
    stat:
      path: /boot/bootmap
    register: boot_bootmap