Duplicate key-sequence package_gdm_removed in cis level1 workstation

[jarred wilson]

Generating the CIS level 1 workstation tailoring file results in a non-functional template due to an included duplicate key, package_gdm_removed. I can confirm that removing one of them allows the templates to be modified and applied.

sudo usg audit --tailoring-file tailor.xml
USG will execute the following command for auditing: oscap xccdf eval --profile cis_level1_workstation_customized --cpe /usr/share/ubuntu-scap-security-guides/current/benchmarks/Canonical_Ubuntu_20.04_Benchmarks-cpe-dictionary.xml --results /var/lib/usg/usg-results-20220222.1133.xml --tailoring-file tailor.xml /usr/share/ubuntu-scap-security-guides/current/benchmarks/Canonical_Ubuntu_20.04_Benchmarks-xccdf.xml
OpenSCAP Error: File 'tailor.xml' line 155: Element '{http://checklists.nist.gov/xccdf/1.1}select': Duplicate key-sequence ['package_gdm_removed'] in unique identity-constraint '{http://checklists.nist.gov/xccdf/1.1}itemSelectKey'.
 [../../../src/XCCDF/xccdf_session.c:614]
Invalid XCCDF Tailoring (1.1) content in tailor.xml. [../../../src/source/oscap_source.c:342]
Invalid XCCDF Tailoring (1.1) content in tailor.xml [../../../src/XCCDF/xccdf_session.c:1169]

Here is the default template: https://pastebin.canonical.com/p/S2j5qrYzZz/

[Adam Bell (arbell)]

Hi Jarred,

This content issue was corrected by hand in usg 20.04.14.1, which released earlier this month.
We've also improved the tailoring file generation process for future builds: https://github.com/canonical/ubuntu-security-guide/pull/4

Since this issue is resolved in the most recent version, I'll close this report. Thank you!