content

content copied to clipboard

Alinux 3 OpenSCAP scanning not working

10

#### Description of problem: All of the scan result using ssg-alinux3-xccdf.xml with profile xccdf_org.ssgproject.content_profile_cis resulting not applicable for all items.  #### SCAP Security Guide Version: 0.1.74 #### Operating System...

blackbrownco

#### Description of problem: In rule accounts_umask_etc_bashrc on Fedora or RHEL the "/etc/bashrc" is configured but on other systems eg. Debian 12 the name of the file is "/etc/bash.bashrc". It...

jan-cerny

Rule ensure_redhat_gpgkey_installed is evaluated as notchecked on RHEL-10

1

#### Description of problem: The rule `ensure_redhat_gpgkey_installed` evaluates as notchecked (No candidate or applicable check found) on RHEL-10 which when combined with other gpgcheck rules in SCAP profiles (`gpgcheck_globally_activated`, `gpgcheck_never_disabled`,...

matusmarhefka

#### Description of problem: Tested with OSPP profile. The rule `require_singleuser_auth` fix is unsuccessful. Scan after remediation fails because OVAL test `test_require_rescue_service` doesn't find expected `ExecStart` pattern in `/usr/lib/systemd/system/rescue.service` file....

matusmarhefka

#### Description of problem: The rule `xwindows_remove_packages` tries to remove the following packages: - xorg-x11-server-common - xorg-x11-server-utils - xorg-x11-server-Xorg - xorg-x11-server-Xwayland #### SCAP Security Guide Version: master branch as of...

marcusburghardt

#### Description of problem: The default branch is currently "master" which is not inclusive with a majority of the public internet switching the default branch name to "main". Given the...

aghassemlouei

Review and fix sssd rules in ANSSI control file

7

#### Description: When reviewing #12351 I noticed some issues with `sssd` related rules. This PR: - Remove unnecessary steps in `sssd_enable_pam_services` bash remediation - Updates the `id_provider` value and fix...

marcusburghardt

Wrong usage of lineinfile template

1

The lineinfile template does not accept regex as input. https://github.com/ComplianceAsCode/content/blob/a6ff62a071070227558a308b201ff108f0ef6971/linux_os/guide/services/sssd/sssd_enable_certmap/rule.yml#L73

ggbecker

Missing referenced check files for RHEL 9 profile

1

#### Description of problem: When performing an evaluation as per below I receive an error :- oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_cis --results ssg-rhel9-ds.xml --report ssg-rhel9-level2-ds.html /usr/share/xml/scap/ssg/content/ssg-rhel9-ds.xml OpenSCAP Error: Unable to...

yuljk

Add OL9 to xwindows_runlevel_target tests

1

#### Description: Add OL9 to xwindows_runlevel_target tests #### Rationale: Align OL9 STIG profile with DISA STIG OL9 V1R1

mrkanon