-
Notifications
You must be signed in to change notification settings - Fork 685
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
RHEL 9 STIG Update Q1 2023 #10185
RHEL 9 STIG Update Q1 2023 #10185
Conversation
Skipping CI for Draft Pull Request. |
184494f
to
d7fa5cd
Compare
Various white spaces to remove extra blank lines.
Due to the nature of the import process.
Causes some rendering issues if this is not done
The install line was missing before and causing issues.
Updates from the RHEL 9 STIG
Update for all users not just interactive.
For the RHEL 9 STIG import
For the RHEL 9 STIG import
Import on the RHEL 9 STIG
c5a4d75
to
1a10f81
Compare
Update the check text to match RHEL 8 STIG.
Rules that are staying that are not in the spreadsheet. * Audit rules are being kept since we don't combine like DISA * file_*_cron_* are kept due to some wild carding in some rules. We will need to replace these in the future, once everything is finalized. * There a few rules for FIPS and donf rules that we need for technical reasons * set_password_hashing_algorithm_* to ensure that CCE-83615-5 CCE-83621-3 are fully covered
39e7cb3
to
87ef627
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice. I saw only some minor details.
...sword_attempts/accounts_password_pam_pwhistory_remember_password_auth/policy/stig/shared.yml
Outdated
Show resolved
Hide resolved
...assword_attempts/accounts_password_pam_pwhistory_remember_system_auth/policy/stig/shared.yml
Outdated
Show resolved
Hide resolved
linux_os/guide/services/ssh/file_permissions_sshd_private_key/policy/stig/shared.yml
Outdated
Show resolved
Hide resolved
...accounts/accounts-session/user_umask/accounts_umask_interactive_users/policy/stig/shared.yml
Show resolved
Hide resolved
...permissions/restrictions/enable_nx/bios_enable_execution_restrictions/policy/stig/shared.yml
Outdated
Show resolved
Hide resolved
...permissions/restrictions/enable_nx/bios_enable_execution_restrictions/policy/stig/shared.yml
Show resolved
Hide resolved
...ions/password_storage/accounts_password_pam_unix_rounds_password_auth/policy/stig/shared.yml
Outdated
Show resolved
Hide resolved
...ctions/password_storage/accounts_password_pam_unix_rounds_system_auth/policy/stig/shared.yml
Outdated
Show resolved
Hide resolved
linux_os/guide/system/auditing/package_audispd-plugins_installed/policy/stig/shared.yml
Outdated
Show resolved
Hide resolved
..._os/guide/system/network/network-uncommon/kernel_module_sctp_disabled/policy/stig/shared.yml
Show resolved
Hide resolved
c5f7ad7
to
de1c7a4
Compare
de1c7a4
to
e87da47
Compare
Code Climate has analyzed commit d9fb321 and detected 0 issues on this pull request. The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 51.7% (0.0% change). View more on Code Climate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have checked all the changes and the are sane. Nice work @Mab879 .
Description:
Update the RHEL 9 STIG based on latest changes.
Rationale:
Keep the content up to date.
Review Hints:
Use
./utils/srg_diff.py
to help compare.