Matthew Burket comments

Results 167 comments of


                                            Matthew Burket

Review and fix sssd rules in ANSSI control file

@marcusburghardt Do you plan on workig on this? How can we move this along?

Private Vulnerability Disclosure not Enabled

Please email [[email protected]](mailto:[email protected]). More information (including PGP keys) can be found [here](https://access.redhat.com/security/team/contact). It might help if you mention that this repo is the upstream source for `scap-security-guide` package in your...

Private Vulnerability Disclosure not Enabled

I'm not sure were the report is officially, but a fix should be coming this week.

logind_session_timeout is misaligned with DISA

Since we can't do anything should this have the "blocked" label?

Add rules to support remote offload of journal logs

I'm waving the automatus failures as they are due to rule not being the data streams.

Add rules to support remote offload of journal logs

/packit build

Update upstream OSCAL content from usnistogv and GSA

Waving the CI since these can never be triggered and it should be fine, since it is just vendored JSON data.

accounts_password_set_max_life_existing is misaligned with DISA

This issue still exists in `disa-stig-rhel8-v1r10-xccdf-scap.xml`.

Rule networkmanager_dns_mode is misaligned with DISA

Most likely caused by #13208

Rule `set_password_hashing_yescrypt_cost_factor_logindefs` fails SCAP validation (SRC-38-1)

There are two ways we would solve this. 1. The easy way, set var_password_yescrypt_cost_factor_login_defs to string 2. Create a custom oval that accounts for numbers. This would allow us to...