Gabriel Becker

Possible unreachable code

1

at testcases.UpdateAPITestCaseMixin.get_update_results:408 we have following: `return getattr(self, 'update_results', data)` This means that if self doesn't have 'update_results' attribute 'data' is returned. But as 'update_results' is always defined at testcases:350: `update_results...

Fix sysctl OVAL 5.10 build

6

#### Description: - Fix sysctl OVAL 5.10 build

PCI-DSS v4 was released on March 2022

2

#### Description of problem: Current PCI-DSS profiles (e.g. [rhel8/pci-dss](https://github.com/ComplianceAsCode/content/blob/master/products/rhel8/profiles/pci-dss.profile)) follow version 3.2.1 from 2018. A new version (4.0) was released on March 2022 and can be used to align profiles...

Check if dconf_gnome_enable_smartcard_auth should be part of RHEL9 SRG mapping

2

> There is documentation for RHEL8 on how to enable the smartcard in the desktop environment. So it seems the rule can be applicable to RHEL8/RHEL9. Why it's not in...

Remove mount option custom tests and add templated tests

5

#### Description: - Remove custom tests for rules that use `mount_option` template - Add templated tests for `mount_option` - Add config to skip templated tests for /boot partition. #### Rationale:...

Add custom OVAL for partition_for_tmp to check for tmp.mount service.

14

#### Description: - Create custom OVAL check for `/tmp` partition. This enables the check to comply with checking of `tmp.mount` service status. #### Rationale: - Reference: https://www.stigviewer.com/stig/red_hat_enterprise_linux_7/2020-09-03/finding/V-204496 #### Questions: -...

These files are for now only for the purpose of human inspection, so one can easily find out how the OVAL will look like after it's processed by the build...

#### Description of problem: The template does not use the option at all. Let's remove it or understand if there is something missing. https://github.com/ComplianceAsCode/content/tree/master/shared/templates/mount_option_remote_filesystems

Associate RHEL-07-030840 with https://github.com/ComplianceAsCode/content/blob/master/linux_os/guide/system/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_kmod/rule.yml This rule needs to be fixed for other products, I think it's kinda broken for ubuntu since it's using the templated content for that same as...

Remove rules not applicable in RHEL9 STIG from SRG mapping

3

https://github.com/ComplianceAsCode/content/blob/0dbd1dea7d85332494bf5dc2e444c205dad3c7e0/controls/stig_rhel9/SRG-OS-000073-GPOS-00041.yml#L11-L12 @Mab879