content

content copied to clipboard

Defined notes and Rules for BSI APP.4.4.A6-7

4

#### Description: Notes / Rules for BSI APP4.4.A6 - APP4.4.A7 added. #### Rationale: As we have multiple customers asking for a BSI profile to be included in the compliance-operator, we...

sluetze

Scap Security Guide for Amazon Linux 2/ 2023 versions

4

### Discussed in https://github.com/ComplianceAsCode/content/discussions/10999 Originally posted by **prasannakumarkn** August 16, 2023 I have fetched the latest release for SSG - scap-security-guide-0.1.69 and however I am not seeing AmazonLinux2 SSG, can...

hipponix

Rule accounts_password_pam_pwhistory_remember_password_auth is misaligned with DISA

2

#### Description of problem: SSG content passes, but DISA content fails. DISA content checks only for `/etc/pam.d/password-auth: pam_pwhistory.so has remember set to 5 or greater` Filepath | Pattern | Instance...

mildas

#### Description of problem: The image builder blueprint generated content requires the `firewalld` service to be running but the package is not included in the list of packages to be...

kingsleyzissou

#### Share the context This was discovered when comparing results gained from scans with our content versus scans with DISA provided SCAP. #### Description of problem: In case where one...

vojtapolasek

Defined notes and rules for control BSI APP.4.4.A5

14

#### Description: To check against BSI APP4.4.A5 this commit adds two rules 1. etcd backup rule (manual) 2. a check for CRDs of known backup solutions #### Rationale: - _Rationale...

sluetze

#### Description of problem: https://www.stigviewer.com/stig/red_hat_enterprise_linux_8/2023-09-11/finding/V-230239 The above STIG states that the krb5-workstation package must not be installed on RHEL 8. However, it states in the check text: > If the...

GitYukari

#### Description of problem: The rhel8-playbook-stig.yml Ansible playbook includes checks and fixes for the STIG: https://www.stigviewer.com/stig/red_hat_enterprise_linux_8/2023-09-11/finding/V-230233 The STIG requires `SHA_CRYPT_MIN_ROUNDS` to be present in the file and set to `5000`...

GitYukari

#### Description of problem: The DISA STIG for RHEL-08-010671 (RHEL 8 must disable the kernel.core_pattern) is here: https://www.stigviewer.com/stig/red_hat_enterprise_linux_8/2023-09-11/finding/V-230311 The DISA STIG for RHEL-08-040282 (RHEL 8 must restrict usage of ptrace...

GitYukari

#### Share the context The script will works on built policies as of #11667 and if there is no content It will just build an empty index. #### Proposed change:...

Mab879