tests/scap-security-guide
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Waive rpm_verify_permissions in the RHEL 9 STIG

Browse source 
Waive rpm_verify_permissions in the RHEL 9 STIG machine hardening
test, for example:
https://artifacts.dev.testing-farm.io/ff0ddbe2-cba3-4b6b-806e-5a8dcc176fcc/
See the waiver text itself.
This commit is contained in:
Jan Černý 2022-08-23 13:40:05 +02:00
commit 28a183ea46
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Library/scap-results/rule_waivers/rhel9/stig-fail
View file

@ -7,3 +7,4 @@ set_password_hashing_algorithm_systemauth - https://github.com/OpenSCAP/openscap
set_password_hashing_algorithm_passwordauth - https://github.com/OpenSCAP/openscap/issues/1880, needs to be remediated once more (pass in initial scan, enable_authselect breaks it, but this rule is not remediated as it passed in initial scan)
accounts_password_pam_retry - https://github.com/OpenSCAP/openscap/issues/1880, needs to be remediated once more (pass in initial scan, enable_authselect breaks it, but this rule is not remediated as it passed in initial scan)
postfix_prevent_unrestricted_relay - https://github.com/OpenSCAP/openscap/issues/1880, needs to be remediated once more (notapplicable in initial scan because of no postfix, during remediation phase postfix is installed, but this rule is not remediated)
rpm_verify_permissions - The fail is expected due to conflict with file_permissions_cron rule family. See the warning in rule.yml. Rules file_permissions_cron_* require changing the permissions to a different that default mode for files that belong to the crontab and cronie RPM packages.