bjs
### We worked with Red Hat to come up with this solution (Case 03115293) This code recognizes when there is other session management. Although it still, always, launches tmux for...
RHEL-08-040090 approach breaks existing firewalls (but fix is a simple file copy + 2 simple regexes)
I also realized no interface is assigned. We ran into that as well. We wrote a shell script to handle all this, including identifying the interface. Unfortunately it's on an...
The fun is coming, as elementary RBAC has been added in V-254520 / RHEL-08-040400. Let the breakage begin! https://github.com/ansible-lockdown/RHEL8-STIG/blame/18d8335a420f91849a4e69cfe5371c15eddf9615/tasks/fix-cat2.yml#L7634 For you reading (and very likely POA&M) pleasure ... https://www.stigviewer.com/stig/red_hat_enterprise_linux_8/2023-12-01/finding/V-254520
Just to confirm, in addition to RHEL9 compatibility issues, there will be continued, US Gov't non-compliance with FIPS, NIST, DISA and just about every standard out there for RHEL8, which...
Anyone? Anyone? Buehler? Buehler?
On RHEL7, try 8 (SHA256) and see if it works. I've been building with RHEL8 so much, it may not offer 10 (SHA512) support in it's older RPM. Those also...
Regarding usbguard, the current approach isn't a handler. I.e., it is NOT in the main YAML for Handlers. https://github.com/ansible-lockdown/RHEL8-STIG/blob/18d8335a420f91849a4e69cfe5371c15eddf9615/handlers/main.yml The service enable/restart is in the control itself. https://github.com/ansible-lockdown/RHEL8-STIG/blob/18d8335a420f91849a4e69cfe5371c15eddf9615/tasks/fix-cat2.yml#L6532 For consistency,...