Comments (5)
AC-2 (2)
from content.
@shawndwells can this be closed with the merging of #349? Seems like this should have auto-closed with the merge, but I just wanted to make sure that it wasn't open for another reason.
from content.
not yet. looks like the CCE has been reused in RHEL6/7:
$ grep -rin 26436-6 *
6/input/system/software/disk_partitioning.xml:101:<ident cce="26436-6" stig="RHEL-06-000004" />
6/kickstart/usgcb-server-with-gui-ks.cfg:107:# CCE-26436-6: Ensure /var/log/audit Located On Separate Partition
7/input/system/accounts/restrictions/account_expiration.xml:105:<ident cce="26436-6" />
and likely the xccdf needs to be added to stig profile.
I'll do this now.
from content.
(p.s. @redhatrises thank you so much for helping to clear out the tickets!)
from content.
@redhatrises updated and submitted PR for your review
from content.
Related Issues (20)
- RHEL-08-010161 and RHEL-09-611205 removing keytab files, breaking sssd (misaligned with DISA)
- Inquiry Regarding Handling of "pkg_manager" Variable for Systems Without Package Manager HOT 1
- networkmanager_dns_mode Ansible Remedation is not valid
- dnf-automatic_apply_updates rules in fail after Ansible remedation HOT 1
- dnf-automatic_security_updates_only fails after Ansibe remedation HOT 1
- The template mount_option_remote_filesystems is causing issues
- file_permission_user_init_files_root is misaligned with RHEL 9 STIG HOT 2
- R38 ANSSI wrong file permissions HOT 2
- PCI-DSS generated blueprint missing `firewalld` package
- Scap Security Guide for Amazon Linux 2/ 2023 versions HOT 3
- compare_results.py: show rule ID in case one of results is "not applicable"
- Bash remediation against STIG for RHEL9 (maybe others) in Image Builder creates a bogus `/etc/fstab` entry
- Chronyd rules' link http://chrony.tuxfamily.org link times out HOT 2
- CCE-88173-0 is `notchecked` by SSG, however for DISA STIG it `fail` HOT 3
- CCE-90811-1 is `notselected` by SSG, however for DISA STIG it `fail` HOT 1
- harden_sshd_ciphers_openssh_conf_crypto_policy is misaligned with DISA HOT 2
- ANSSI profile configures unsupported password hashing algorithm on RHEL 8 HOT 1
- Content is not SCAP valid HOT 2
- [BUG] RHEL-related automation should not inject log-collector hostname into /etc/rsyslog.conf HOT 2
- Ansible remediation on Ubuntu looks for wrong PAM files HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from content.