-
Notifications
You must be signed in to change notification settings - Fork 685
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
RHCOS4 STIG: Cover the controls that correspond to the AU control family #10732
Conversation
/test e2e-aws-rhcos4-stig |
/test e2e-aws-ocp4-stig |
/test e2e-aws-ocp4-stig-node |
/test e2e-aws-rhcos4-stig |
rebased on master to get a clean e2e test run |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Also, none of the rules included in the controls had their srg
s updated.
But as we are considering changing the approach to set references from control files, I think we can waive this aspect.
linux_os/guide/system/auditing/policy_rules/audit_ospp_general/kubernetes/shared.yml
Show resolved
Hide resolved
@yuumasato thank you for the careful review. New patches are attached, feel free to ask additional questions, I wasn't sure if I answered them correctly |
/test e2e-aws-rhcos4-stig |
Hmm I should fix these I think:
|
@jhrozek I think what is missing is the |
And I think |
…cessful attempts to access privileges occur.
… make sure auditing is on at system startup
…g is enabled at runtime
…he audit_rules_immutable rule
… attempts to modify privileges occur
…ify security objects occur.
… attempts to delete privileges occur.
…enerate audit records when successful/unsuccessful attempts to delete security objects occur
… successful/unsuccessful attempts to delete security objects occur
…st be configured to audit the loading and unloading of dynamic kernel modules
…ccess start and end times.
… concurrent logons from different workstations and systems occur.
@yuumasato thanks, I fixed both, ended up reworking them because the hand-written urlencoded string was getting on my nerves :-) |
linux_os/guide/system/auditing/policy_rules/audit_access_failed/kubernetes/shared.yml
Outdated
Show resolved
Hide resolved
/test e2e-aws-rhcos4-stig |
Code Climate has analyzed commit ed4ee93 and detected 0 issues on this pull request. The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 53.2% (0.0% change). View more on Code Climate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you, Jakub!
Description:
that correspond to any of the NIST AU controls
Rationale:
Review Hints: