content

content copied to clipboard

Initial OSPP Control File

8

#### Description: Create Initial OSPP control file. This is an automatically created using the script in this branches history. #### Rationale: Get the RHEL 10 draft OSPP profile ready.

Mab879

"<" operator in jq filter fails the build

4

#### Description of problem: I tried to use the less-than-operator "

ermeratos

file_permission_user_init_files_root is misaligned with RHEL 9 STIG

5

#### Description of problem: The content is misaligned with an external (third party) content that targets the same policy - typically, this means that a system hardened by our content...

vojtapolasek

OCPBUGS-32551: swap token inactivity timeout rule

11

#### Description: - Let's use `oauth_or_oauthclient_inactivity_timeout` instead of `oautclient_inactivity_timeout`. #### Rationale: - The former rule checks for server and client token timeout configuration is multiple places and remediates the server...

yuumasato

Set OVAL version from 5.11 to 5.11.2

18

#### Description: Investigating the issue #11891 it was noticed that OpenSCAP scanner was returning error for rule `auditd_audispd_configure_sufficiently_large_partition` because the OVAL in this rule was using an OVAL property only...

marcusburghardt

Firewall technology related rules per service and package change logic according to interactive profile variable

10

#### Description: - Make sure that behaviour of rules about nftables,iptables and firewalld are mutually exclusive and the default behaviour of the checks and remediations is based on external interactive...

teacup-on-rockingchair

#### Description of problem: We are in the middle of a project to harden an Ubuntu 20 machine according to Canonical Ubuntu 20.04 LTS STIG - Ver 1, Rel 11...

pfuntner

chronyd_or_ntpd_set_maxpoll does not check pools

2

#### Description of problem: Rule chronyd_or_ntpd_set_maxpoll check if all time sources in `/etc/chrony.conf` specified by `server` keyword have `maxpoll` option set. However, it doesn't check sources specified as `pool` or...

jan-cerny

Initial HIPAA RHEL 10 Profile

4

#### Description: Initial HIPAA RHEL 10 Profile #### Rationale: RHEL 10 Initial profile set.

Mab879

#### Description of problem: Remediation for DISA-STIG-RHEL-08-020035 involves adding this setting to /etc/systemd/logind.conf: StopIdleSessionSec=900 Per Red Hat this, can cause GNOME sessions to fail. For example, if the RHEL screen...

lsimmons1957