Jan Černý comments

Results 394 comments of


                                            Jan Černý

mount_option_boot_nosuid fails to remediate with Ansible

I thinkt that the Ansible Tasks for the rule mount_option_boot_nosuid are in conflict with Ansible Task remediating rule mount_option_nodev_nonroot_local_partitions which is executed after them. I have done an experiment in...

OCP4: deprecating two api_server rules

ping

Re-enable runtime check on network related sysctls

@rhmdnd @Vincent056 Any volunteers? @yuumasato You'll probably have to rebase this to resolve the CI checks.

no_shelllogin_for_systemaccounts is misaligned with DISA

IIUC using `/bin/false` will also prevent the user from login but `/sbin/nologin` will also display a message to the user that tries to login. I would say that for system...

Firewall technology related rules per service and package change logic according to interactive profile variable

ping

Remove remediations for security_patches_up_to_date

@Mab879 This isn't the right fix, there are products that still actively use the rule security_patches_up_to_date, for example Oracle, SLES, Ubuntu. You can find them by looking for `oval_feed_url` variable....

Improve Rsyslog rules to support Rainer script syntax

@marcusburghardt > Besides the comments in specific files, the remediation for rule rsyslog_cron_logging is not working when the /etc/rsyslog.conf file is deleted, more specifically in the test scenario no_rsyslog_file.fail.sh. After...

Improve Rsyslog rules to support Rainer script syntax

/retest

Improve Rsyslog rules to support Rainer script syntax

I have changed and renamed the test scenario no_rsyslog_file.fail.sh. I have changed occurrences to RainerScript.

Show most used rules of component

I wonder how the counts are computed. If I run your tool I for example see that `accounts_password_pam_minlen` is used 15 times, but when I run this command I get...