tests/scap-security-guide
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Do not remove rsync in machine hardening

Browse source
This commit is contained in:
Milan Lysonek 2023-01-13 09:53:06 +01:00
commit b460eb802a
2 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
Sanity/ansible-machine-hardening/runtest.sh
View file

@ -17,10 +17,12 @@ TIMESTAMP_FILE="/test_timestamp"
# The nfs-utils and gssproxy packages are beakerlib dependencies and cannot be
# removed. The accounts_password_set_max_life_existing rule requires password
# change after hardening, skip it unselect mount_option as we can't remediate it.
# Rsync is required by tmt, don't remove it from machine.
EXTENDED_LIST="xccdf_org.ssgproject.content_rule_package_nfs-utils_removed
xccdf_org.ssgproject.content_rule_package_gssproxy_removed
xccdf_org.ssgproject.content_rule_accounts_password_set_max_life_existing
xccdf_org.ssgproject.content_rule_mount_option_.*"
xccdf_org.ssgproject.content_rule_mount_option_.*
xccdf_org.ssgproject.content_rule_package_rsync_removed"
# On CentOS, exclude rules that check if OS is FIPS certified
if rlIsCentOS; then

4
Sanity/machine-hardening/runtest.sh
View file

@ -17,10 +17,12 @@ TIMESTAMP_FILE="/test_timestamp"
# The nfs-utils and gssproxy packages are beakerlib dependencies and cannot be
# removed. The accounts_password_set_max_life_existing rule requires password
# change after hardening, skip it unselect mount_option as we can't remediate it.
# Rsync is required by tmt, don't remove it from machine.
EXTENDED_LIST="xccdf_org.ssgproject.content_rule_package_nfs-utils_removed
xccdf_org.ssgproject.content_rule_package_gssproxy_removed
xccdf_org.ssgproject.content_rule_accounts_password_set_max_life_existing
xccdf_org.ssgproject.content_rule_mount_option_.*"
xccdf_org.ssgproject.content_rule_mount_option_.*
xccdf_org.ssgproject.content_rule_package_rsync_removed"
# On CentOS, exclude rules that check if OS is FIPS certified
if rlIsCentOS; then