Jan Černý

Rule configure_bashrc_exec_tmux is misaligned with DISA

3

#### Description of problem: Rule xccdf_org.ssgproject.content_rule_configure_bashrc_exec_tmux is misaligned with rule xccdf_mil.disa.stig_rule_SV-230349r833388_rule from the DISA content in disa-stig-rhel8-v1r6-xccdf-scap.xml. #### SCAP Security Guide Version: current upstream as of 2022-08-06 as of HEAD...

Use XCCDF 1.2 to create STIG overlay

5

#### Description: Use XCCDF 1.2 to create STIG overlay. The script create-stig-overlay.py has been updated to accept XCCDF 1.2. The format of the overlay file doesn't change. For more details,...

#### Description of problem: Rule no_empty_passwords fails after RHEL 7 OSPP kickstart installation or RHEL 7 PCI-DSS kickstart with GUI installation or RHEL 7 STIG kickstart installation. #### SCAP Security...

#### Description of problem: A test that tests OSPP hardening of a VM fails because rule zipl_bootmap_is_up_to_date fails after a reboot. #### SCAP Security Guide Version: current upstream as of...

#### Description of problem: Rule xccdf_org.ssgproject.content_rule_no_empty_passwords is misaligned with rule xccdf_mil.disa.stig_rule_SV-204424r809187_rule from shared/references/disa-stig-rhel7-v3r7-xccdf-scap.xml. #### SCAP Security Guide Version: current upstream as of 2022-08-06 as of HEAD https://github.com/ComplianceAsCode/content/commit/61b8f59e05e7a63267e22f3a44ff2b98de822ec0 #### Operating System...

Use data stream to generate statistics

4

#### Description: The built SCAP source data stream will be used for generating the overall statistics, overall HTML statistics, profile statistics and profile HTML statistics instead of using the outdated...

Automatúš in combined mode executes irrelevant scenarios

1

#### Description of problem: When Automatus is executed in combined mode, it executes test scenarios that are marked as scenarios for a different profile than the profile being tested. Then...

#### Description of Problem: During @vojtapolasek 's work on https://github.com/ComplianceAsCode/content/pull/9285 we have discovered that if an XCCDF value contains a pipe character (`|`) the generated Ansible Playbook in invalid because...

OpenSCAP could possibly fail to write a verbose message when switching to offline mode

4

We call `dI` after `chroot()` but before calling `chdir("/")`. ``` openscap-1.2.17/src/OVAL/probes/probe/main.c:253: chroot_call: Calling chroot: "chroot(rootdir)". 16. openscap-1.2.17/src/OVAL/probes/probe/main.c:263: chroot: Calling function "__oscap_dlprintf" after chroot() but before calling chdir("/"). # 261| *...

crashes in pthread_mutex_unlock

5

#### Description of Problem: oscap sometimes crashes randomly due to an abort in `pthread_mutex_unlock`. It happens in multiple XCCDF "unit tests" when they run command `oscap xccdf eval --remediate`. ####...