From 808d59958572ea43dc905263f02f5bc214362b05 Mon Sep 17 00:00:00 2001
From: Ales Musil <amusil@redhat.com>
Date: Thu, 5 May 2022 12:58:49 +0200
Subject: [PATCH] Enable PCI DSS for RHVH

Signed-off-by: Ales Musil <amusil@redhat.com>
---
 build.sh | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/build.sh b/build.sh
index a34866c..736d712 100755
--- a/build.sh
+++ b/build.sh
@@ -45,10 +45,7 @@ elif [ $DISTRO = "node" -o $DISTRO = "el9node" ]; then
     curl --fail -L -o $NODE_IMG $([[ -f $NODE_IMG ]] && echo -z $NODE_IMG) ${NODE_URL_BASE}${NODE_URL_LATEST_VERSION} || exit 1
 fi
 
-# validate OpenSCAP profile parameter
-# TODO we cannot use the profile on RHVH until we make changes to RHVH
-#if [ $DISTRO = "rhel8" -o $DISTRO = "rhvh" ]; then
-if [ $DISTRO = "rhel8" ]; then
+if [ $DISTRO = "rhel8" ] || [ $DISTRO = "rhvh" -a "$OPENSCAP_PROFILE" = "xccdf_org.ssgproject.content_profile_pci-dss" ]; then
     echo "With OpenSCAP profile: ${OPENSCAP_PROFILE:-none}"
 else
     echo "Distro doesn't work with OpenSCAP profiles properly, ignoring"