Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rule accounts_tmout is misaligned with DISA STIG #11548

Closed
vojtapolasek opened this issue Feb 6, 2024 · 1 comment
Closed

rule accounts_tmout is misaligned with DISA STIG #11548

vojtapolasek opened this issue Feb 6, 2024 · 1 comment
Labels
blocked Issue that can't be fixed in content. productization-issue Issue found in upstream stabilization process.

Comments

@vojtapolasek
Copy link
Collaborator

Description of problem:

The problem is with the rule account_tmout.
This rule checks for certain line within Bash startup files.
The DISA counterpart is xccdf_mil.disa.stig_rule_SV-204579r861070_rule.
The core of the problem lies in the fact that DISA uses the "declare" keyword in the command, where our content has recently switched to usage of "typeset". It happened in this PR: #11289
It increases compatibility with shells.

SCAP Security Guide Version:

stabilization-v0.1.72 branch, commit 7fb44f7

Operating System Version:

RHEL 7

Steps to Reproduce:

  1. scan and remediate system with our content, then scan again and save results
  2. scan the system with DISA SCAP and save results
  3. use the compare_results.py script to compare result files and see difference.

Alternatively, build the datastream and search for "tmout" in OVAL. Do the same for the DISA provided SCAP file.

Actual Results:

While the rule from this repo passes, DISA content rule fails.

Expected Results:

Both rules should pass.

Additional Information/Debugging Steps:

@mildas
Copy link
Contributor

mildas commented Aug 9, 2024

Passed in 2 recent stabilization test runs and 1 daily productization. Thus, closing as it seems to be fixed

@mildas mildas closed this as completed Aug 9, 2024
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
blocked Issue that can't be fixed in content. productization-issue Issue found in upstream stabilization process.
Projects
None yet
Development

No branches or pull requests

2 participants