Matthew Burket comments

Results 167 comments of


                                            Matthew Burket

Fix sysctl OVAL 5.10 build

This PR appears to only fix the build for RHEL 8; this helps but doesn't appear to fix the complete OVAL 5.10 build.

SRG Export VulnDiscussion can be more than the Rationale

I think that will depend on the feedback we get from DISA, if we need to make sweeping changes to our VulnDiscussion sections.

Evaluate replacing `operating system` with macro value `{{{ full_name }}}` in every field of rule.yml files

A better find and replace string might be `the operating system`. Because that is usually what I want replaced.

correct update-crypto-policies --set is not idempotent

/ok-to-test

Add templates to handle detection of most Firefox Policy STIG items. (WIP)

/ok-to-test

Add templates to handle detection of most Firefox Policy STIG items. (WIP)

The content looks good. @matejak can you take a look the remediation script?

Missing content in title for control SRG-OS-000355-GPOS-00143

The script used to create the files could be changed change the title. Also, we can double check the changelog for the GPOS SRG V2R2 as well to see what...

Rsyslog files permissions fix wildcard path

/ok-to-test

Check if dconf_gnome_enable_smartcard_auth should be part of RHEL9 SRG mapping

Pulling my comment from that PR here: I agree that if the system has a GUI, it should have Smartcard support enabled in GNOME. Might want to do some brief...

Test scenario `missing_blacklist.fail.sh` fails for kernel_module_dccp_disabled

The fix for RHEL 9 is just to remove the rule.