hardening-script-el6 icon indicating copy to clipboard operation
hardening-script-el6 copied to clipboard

Published 20 hours ago • verified publisher icon fcaviggia

stig-fix-1.7.9-el6.noarch.rpm

Open lmeinecke opened this issue 10 years ago • 4 comments

I just ran this version on a fresh RHEL6 system and first thing I noticed was the banner in gnome was messed up. It's the same way for ssh. Looks like the /opt/stig-fix/config/issue file is stock and doesn't have the DoD banner.

Also when doing an rpm -e on stig-fix I noticed it gives an error but does erase the files in /opt/stig-fix. The banner in gnome still seemed to be a little off.

I downloaded 1.7.8 and then ran that against the system. It seems to apply the correct files.

I don't have 1.7.9 running anymore but I think the krb5.conf file wasn't correct either. I noticed the encryption lines weren't there for some reason.

Has anyone else run the 1.7.9 rpm?

lmeinecke avatar Oct 17 '14 16:10 lmeinecke

I've tested the script several times when installing systems using the stig-fix-el6-kickstart - I'll try to test it some more this weekend.

fcaviggia avatar Oct 17 '14 21:10 fcaviggia

I just applied this to a fresh RHEL6.6 workstation install and noticed that /etc/pam.d/system-auth-local is not 644. This causes the gnome lock screen to flicker when it sees input from keyboard/mouse and become unresponsive.

lmeinecke avatar Nov 24 '14 20:11 lmeinecke

This was my second test of this RPM and the issue, krb5.conf , and login.defs aren't correct. Perhaps this release should be pulled? It's not working properly like the others.

lmeinecke avatar Nov 24 '14 21:11 lmeinecke

Sorry for the delayed response, I'll check it again tonight.

fcaviggia avatar Dec 01 '14 18:12 fcaviggia