Matthew Burket comments

Results 167 comments of


                                            Matthew Burket

`sshd_set_keepalive` is misaligned with DISA STIG

We are out of aliment based the text "If "ClientAliveCountMax" does not exist, is not set to a value of "1" in "/etc/ssh/sshd_config", or is commented out, this is a...

RHEL10 ISM O - Rules missing `ism` reference

With this many missing should move to using the control generated references for ISM?

RHEL10 ISM O - Rules missing `ism` reference

Seems we forgot that ISM O inherits from e8 and that is what seems to be missing refs.

RHEL8 OSPP - Rules missing `ospp` reference

This seems to be an updated duplicate of #6842.

RHEL8 OSPP - Rules missing `ospp` reference

Due to the age of RHEL 8 this issue is being closed.

`harden_sshd_ciphers_openssh_conf_crypto_policy` and `harden_sshd_macs_openssh_conf_crypto_policy` fail to remediate in the RHEL 8 STIG

https://github.com/ComplianceAsCode/content/pull/13374 might be related.

False Positive finding with `harden_sshd_ciphers_openssh_conf_crypto_policy` on Gitlab UBI 9 container

That SSG version is rather old, December 2023. Can you please try using the [latest release](https://github.com/ComplianceAsCode/content/releases).

False Positive finding with `configure_openssl_tls_crypto_policy` on UBI 9 container

That SSG version is rather old, December 2023. Can you please try using the [latest release](https://github.com/ComplianceAsCode/content/releases).

Update ansible remediation to harden_sshd_ciphers_openssh_conf_crypto_policy rule

Thanks for the PR. What was the reasoning behind moving to `variable` vs `profile` in the tests?

Update ansible remediation to harden_sshd_ciphers_openssh_conf_crypto_policy rule

Waving the two failing automatus CI checks since SLE15 and Ubuntu don't have crypto policy rules.