content icon indicating copy to clipboard operation
content copied to clipboard

Missing content in title for control SRG-OS-000355-GPOS-00143

Open ggbecker opened this issue 3 years ago • 4 comments

https://github.com/ComplianceAsCode/content/blob/3753283b2f00f3dcbf396bd5f66e7053e390dc12/controls/stig_rhel9/SRG-OS-000355-GPOS-00143.yml#L5-L8

it should be:

The operating system must, for networked systems, compare internal information system clocks at least every 24 hours with a server which is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

It might be a good idea to regenerate the title for every control we have and see if there is any other discrepancy

ggbecker avatar Apr 08 '22 12:04 ggbecker

@Mab879

ggbecker avatar Apr 08 '22 12:04 ggbecker

The script used to create the files could be changed change the title. Also, we can double check the changelog for the GPOS SRG V2R2 as well to see what titles might need updating.

Mab879 avatar Apr 08 '22 13:04 Mab879

The script used to create the files could be changed change the title. Also, we can double check the changelog for the GPOS SRG V2R2 as well to see what titles might need updating.

Indeed, the script can be enhanced to update fields in case the file already exists

ggbecker avatar Apr 08 '22 16:04 ggbecker

this makes me think that the whole process should be dynamic which generates all the required files during the build system. Otherwise we can endup with outdated files when a new rule comes in place that covers some other aspect of an SRG item for example. We need to think how to handle this.

ggbecker avatar Apr 08 '22 16:04 ggbecker

Fixed in https://github.com/ComplianceAsCode/content/pull/8621

jan-cerny avatar Nov 04 '22 14:11 jan-cerny