Update sssd ldap related rules to check /etc/sssd/conf.d/*.conf files #11474

Xeicker · 2024-01-24T19:59:57Z

Description:

Add /etc/sssd/conf.d/*.conf files as a possibility to find the configurations. Update affects:
- OVAL
- Ansible
- Bash
- Tests

Rationale:

These configurations can be place there as noted in latest OL7 STIG V1R14

Review Hints:

New tests should cover new addition

openshift-ci · 2024-01-24T20:00:08Z

Hi @Xeicker. Thanks for your PR.

I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

github-actions · 2024-01-24T20:01:32Z

Start a new ephemeral environment with changes proposed in this pull request:

rhel8 (from CTF) Environment (using Fedora as testing environment)

Fedora Testing Environment

Oracle Linux 8 Environment

github-actions · 2024-01-24T20:04:16Z

This datastream diff is auto generated by the check Compare DS/Generate Diff

Click here to see the full diff

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir' differs.
--- xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir
+++ xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir
@@ -28,6 +28,11 @@
         fi
 fi
 
+readarray -t SSSD_CONF_D_FILES < <(find /etc/sssd/conf.d/ -name "*.conf")
+for SSSD_CONF_D_FILE in "${SSSD_CONF_D_FILES[@]}"; do
+    sed -i "s#ldap_tls_cacertdir[^(\n)]*#ldap_tls_cacertdir = $var_sssd_ldap_tls_ca_dir#" "$SSSD_CONF_D_FILE"
+done
+
 else
     >&2 echo 'Remediation is not applicable, nothing was done'
 fi

ansible remediation for rule 'xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir' differs.
--- xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir
+++ xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir
@@ -115,3 +115,43 @@
   - no_reboot_needed
   - sssd_ldap_configure_tls_ca_dir
   - unknown_strategy
+
+- name: Find all the conf files inside /etc/sssd/conf.d/
+  find:
+    paths: /etc/sssd/conf.d/
+    patterns: '*.conf'
+  register: sssd_conf_d_files
+  when:
+  - '"sssd-common" in ansible_facts.packages'
+  - ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
+  tags:
+  - CCE-82456-5
+  - NIST-800-53-CM-6(a)
+  - NIST-800-53-SC-12(3)
+  - low_complexity
+  - medium_disruption
+  - medium_severity
+  - no_reboot_needed
+  - sssd_ldap_configure_tls_ca_dir
+  - unknown_strategy
+
+- name: Set ldap_tls_cacertdir to {{ var_sssd_ldap_tls_ca_dir }} in /etc/sssd/conf.d/
+    if exists
+  ansible.builtin.replace:
+    path: '{{ item.path }}'
+    regexp: '[^#]*ldap_tls_cacertdir.*'
+    replace: ldap_tls_cacertdir = {{ var_sssd_ldap_tls_ca_dir }}
+  with_items: '{{ sssd_conf_d_files.files }}'
+  when:
+  - '"sssd-common" in ansible_facts.packages'
+  - ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
+  tags:
+  - CCE-82456-5
+  - NIST-800-53-CM-6(a)
+  - NIST-800-53-SC-12(3)
+  - low_complexity
+  - medium_disruption
+  - medium_severity
+  - no_reboot_needed
+  - sssd_ldap_configure_tls_ca_dir
+  - unknown_strategy

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert' differs.
--- xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert
+++ xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert
@@ -25,6 +25,11 @@
         fi
 fi
 
+readarray -t SSSD_CONF_D_FILES < <(find /etc/sssd/conf.d/ -name "*.conf")
+for SSSD_CONF_D_FILE in "${SSSD_CONF_D_FILES[@]}"; do
+    sed -i "s#ldap_tls_reqcert[^(\n)]*#ldap_tls_reqcert = demand#" "$SSSD_CONF_D_FILE"
+done
+
 else
     >&2 echo 'Remediation is not applicable, nothing was done'
 fi

ansible remediation for rule 'xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert' differs.
--- xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert
+++ xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert
@@ -110,3 +110,42 @@
   - no_reboot_needed
   - sssd_ldap_configure_tls_reqcert
   - unknown_strategy
+
+- name: Find all the conf files inside /etc/sssd/conf.d/
+  find:
+    paths: /etc/sssd/conf.d/
+    patterns: '*.conf'
+  register: sssd_conf_d_files
+  when:
+  - '"sssd-common" in ansible_facts.packages'
+  - ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
+  tags:
+  - CCE-84062-9
+  - NIST-800-53-CM-6(a)
+  - NIST-800-53-SC-12(3)
+  - low_complexity
+  - medium_disruption
+  - medium_severity
+  - no_reboot_needed
+  - sssd_ldap_configure_tls_reqcert
+  - unknown_strategy
+
+- name: Set ldap_tls_reqcert to demand in /etc/sssd/conf.d/ if exists
+  ansible.builtin.replace:
+    path: '{{ item.path }}'
+    regexp: '[^#]*ldap_tls_reqcert.*'
+    replace: ldap_tls_reqcert = demand
+  with_items: '{{ sssd_conf_d_files.files }}'
+  when:
+  - '"sssd-common" in ansible_facts.packages'
+  - ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
+  tags:
+  - CCE-84062-9
+  - NIST-800-53-CM-6(a)
+  - NIST-800-53-SC-12(3)
+  - low_complexity
+  - medium_disruption
+  - medium_severity
+  - no_reboot_needed
+  - sssd_ldap_configure_tls_reqcert
+  - unknown_strategy

New content has different text for rule 'xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls'.
--- xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls
+++ xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls
@@ -11,7 +11,7 @@
 
 To check if LDAP is configured to use TLS when id_provider is
 set to ldap or ipa, use the following command:
-$ sudo grep -i ldap_id_use_start_tls /etc/sssd/sssd.conf
+$ sudo grep -i ldap_id_use_start_tls /etc/sssd/sssd.conf /etc/sssd/conf.d/*.conf
 
 [reference]:
 11

bash remediation for rule 'xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls' differs.
--- xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls
+++ xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls
@@ -25,6 +25,11 @@
         fi
 fi
 
+readarray -t SSSD_CONF_D_FILES < <(find /etc/sssd/conf.d/ -name "*.conf")
+for SSSD_CONF_D_FILE in "${SSSD_CONF_D_FILES[@]}"; do
+    sed -i "s#ldap_id_use_start_tls[^(\n)]*#ldap_id_use_start_tls = true#" "$SSSD_CONF_D_FILE"
+done
+
 else
     >&2 echo 'Remediation is not applicable, nothing was done'
 fi

ansible remediation for rule 'xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls' differs.
--- xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls
+++ xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls
@@ -115,3 +115,44 @@
   - no_reboot_needed
   - sssd_ldap_start_tls
   - unknown_strategy
+
+- name: Find all the conf files inside /etc/sssd/conf.d/
+  find:
+    paths: /etc/sssd/conf.d/
+    patterns: '*.conf'
+  register: sssd_conf_d_files
+  when:
+  - '"sssd-common" in ansible_facts.packages'
+  - ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
+  tags:
+  - CCE-82437-5
+  - NIST-800-53-CM-6(a)
+  - NIST-800-53-CM-7(a)
+  - NIST-800-53-CM-7(b)
+  - high_severity
+  - low_complexity
+  - medium_disruption
+  - no_reboot_needed
+  - sssd_ldap_start_tls
+  - unknown_strategy
+
+- name: Set ldap_id_use_start_tls to true in /etc/sssd/conf.d/ if exists
+  ansible.builtin.replace:
+    path: '{{ item.path }}'
+    regexp: '[^#]*ldap_id_use_start_tls.*'
+    replace: ldap_id_use_start_tls = true
+  with_items: '{{ sssd_conf_d_files.files }}'
+  when:
+  - '"sssd-common" in ansible_facts.packages'
+  - ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
+  tags:
+  - CCE-82437-5
+  - NIST-800-53-CM-6(a)
+  - NIST-800-53-CM-7(a)
+  - NIST-800-53-CM-7(b)
+  - high_severity
+  - low_complexity
+  - medium_disruption
+  - no_reboot_needed
+  - sssd_ldap_start_tls
+  - unknown_strategy

jan-cerny · 2024-01-25T10:07:47Z

...d/sssd-ldap/sssd_ldap_configure_tls_ca_dir/tests/ldap_tls_cacertdir_bad_value_conf_d.fail.sh

@@ -0,0 +1,16 @@
+#!/bin/bash
+# packages = /usr/lib/systemd/system/sssd.service
+# profiles = xccdf_org.ssgproject.content_profile_stig


I don't see a reason for having the profiles key here. Why do you add it?

Just copied it from the other tests

jan-cerny · 2024-01-25T10:13:51Z

...ldap/sssd_ldap_configure_tls_reqcert/tests/ldap_id_provider_and_reqcert_never_conf_d.fail.sh

@@ -0,0 +1,12 @@
+#!/bin/bash


Suggested change

#!/bin/bash

#!/bin/bash

# packages = sssd-ldap

jan-cerny · 2024-01-25T10:18:19Z

...e/services/sssd/sssd-ldap/sssd_ldap_configure_tls_reqcert/tests/correct_value_conf_d.pass.sh

@@ -0,0 +1,23 @@
+#!/bin/bash


Suggested change

#!/bin/bash

#!/bin/bash

# packages = sssd-ldap

jan-cerny · 2024-01-25T10:23:27Z

...ldap/sssd_ldap_configure_tls_reqcert/tests/ldap_id_provider_and_reqcert_never_conf_d.fail.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+


this test scenario fails for me, the rule passes:

jcerny@fedora:~/work/git/scap-security-guide (pr/11474)$ python3 tests/automatus.py rule --libvirt qemu:///system ssgts_rhel7 --scenario ldap_id_provider_and_reqcert_never_conf_d.fail.sh sssd_ldap_configure_tls_reqcert Setting console output to log level INFO INFO - The base image option has not been specified, choosing libvirt-based test environment. INFO - Logging into /home/jcerny/work/git/scap-security-guide/logs/rule-custom-2024-01-25-1102/test_suite.log INFO - xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert ERROR - Script ldap_id_provider_and_reqcert_never_conf_d.fail.sh using profile (all) found issue: ERROR - Rule evaluation resulted in pass, instead of expected fail during initial stage ERROR - The initial scan failed for rule 'xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert'.

I set the wrong config in the test hahaha

jan-cerny · 2024-01-25T10:24:45Z

shared/macros/10-bash.jinja

@@ -1291,6 +1290,12 @@ if grep -qvzosP $AD_REGEX $SSSD_CONF; then
                fi
        fi
 fi
+
+readarray -t SSSD_CONF_D_FILES < <(find /etc/sssd/conf.d/ -name *.conf)


shellcheck flags this, see the CI results:

In /__w/content/content/build/rhel8/fixes/bash/sssd_ldap_configure_tls_ca_dir.sh line 32: readarray -t SSSD_CONF_D_FILES < <(find /etc/sssd/conf.d/ -name *.conf) ^----^ SC2061 (warning): Quote the parameter to -name so the shell won't interpret it.

Update rules sssd_ldap_configure_tls_ca_dir, sssd_ldap_start_tls & sssd_ldap_configure_tls_reqcert to also consider files in /etc/sssd/conf.d/ directory. This update includes OVAL changes for each rule, and changes in the macros that the remedations use Signed-off-by: Edgar Aguilar <edgar.aguilar@oracle.com>

Add tests to cover scenarios with configurations in files in /etc/sssd/conf.d/ directory Signed-off-by: Edgar Aguilar <edgar.aguilar@oracle.com>

Signed-off-by: Edgar Aguilar <edgar.aguilar@oracle.com>

codeclimate · 2024-01-30T23:13:51Z

Code Climate has analyzed commit 5537b5c and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 58.3% (0.0% change).

View more on Code Climate.

jan-cerny

The Automatus test scenarios are passing when run locally.

jcerny@fedora:~/work/git/scap-security-guide (pr/11474)$ python3 tests/automatus.py rule --libvirt qemu:///system ssgts_rhel7 sssd_ldap_configure_tls_ca_dir sssd_ldap_configure_tls_reqcert sssd_ldap_start_tls
Setting console output to log level INFO
INFO - The base image option has not been specified, choosing libvirt-based test environment.
INFO - Logging into /home/jcerny/work/git/scap-security-guide/logs/rule-custom-2024-01-31-0959/test_suite.log
INFO - xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir isn't part of profile xccdf_org.ssgproject.content_profile_stig requested by script domain_not_there.fail.sh.
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir isn't part of profile xccdf_org.ssgproject.content_profile_stig requested by script ldap_tls_cacertdir.pass.sh.
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir isn't part of profile xccdf_org.ssgproject.content_profile_stig requested by script ldap_tls_cacertdir_bad_value.fail.sh.
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir isn't part of profile xccdf_org.ssgproject.content_profile_stig requested by script ldap_tls_cacertdir_not_absolute_path.fail.sh.
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir isn't part of profile xccdf_org.ssgproject.content_profile_stig requested by script ldap_tls_cacertdir_not_there.fail.sh.
INFO - Script ldap_tls_cacertdir_bad_value_conf_d.fail.sh using profile (all) OK
INFO - Script ldap_tls_cacertdir_conf_d.pass.sh using profile (all) OK
INFO - xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert
WARNING - Script ad_id_provider_and_reqcert_never.notapplicable.sh using profile (all) notapplicable
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert evaluation resulted in notapplicable
INFO - Script correct_value.pass.sh using profile (all) OK
INFO - Script correct_value_dropin.pass.sh using profile (all) OK
WARNING - Script id_provider_is_set_to_ad.notapplicable.sh using profile (all) notapplicable
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert evaluation resulted in notapplicable
INFO - Script ldap_id_provider_and_reqcert_never.fail.sh using profile (all) OK
INFO - Script ldap_tls_reqcert_not_there.fail.sh using profile (all) OK
INFO - Script correct_value_conf_d.pass.sh using profile (all) OK
INFO - Script ldap_id_provider_and_reqcert_never_conf_d.fail.sh using profile (all) OK
INFO - xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls
WARNING - Script ad_id_provider_and_tls_false.notapplicable.sh using profile (all) notapplicable
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls evaluation resulted in notapplicable
INFO - Script correct_value.pass.sh using profile (all) OK
WARNING - Script id_provider_is_set_to_ad.notapplicable.sh using profile (all) notapplicable
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls evaluation resulted in notapplicable
INFO - Script ldap_id_provider_and_tls_false.fail.sh using profile (all) OK
INFO - Script ldap_use_start_tls_not_there.fail.sh using profile (all) OK
INFO - Script correct_value_dropin.pass.sh using profile (all) OK
INFO - Script correct_value_conf_d.pass.sh using profile (all) OK
INFO - Script ldap_id_provider_and_tls_false_conf_d.fail.sh using profile (all) OK
jcerny@fedora:~/work/git/scap-security-guide (pr/11474)$ python3 tests/automatus.py rule --libvirt qemu:///system ssgts_rhel8 sssd_ldap_configure_tls_ca_dir sssd_ldap_configure_tls_reqcert sssd_ldap_start_tls
Setting console output to log level INFO
INFO - The base image option has not been specified, choosing libvirt-based test environment.
INFO - Logging into /home/jcerny/work/git/scap-security-guide/logs/rule-custom-2024-01-31-1012/test_suite.log
INFO - xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir isn't part of profile xccdf_org.ssgproject.content_profile_stig requested by script domain_not_there.fail.sh.
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir isn't part of profile xccdf_org.ssgproject.content_profile_stig requested by script ldap_tls_cacertdir.pass.sh.
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir isn't part of profile xccdf_org.ssgproject.content_profile_stig requested by script ldap_tls_cacertdir_bad_value.fail.sh.
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir isn't part of profile xccdf_org.ssgproject.content_profile_stig requested by script ldap_tls_cacertdir_not_absolute_path.fail.sh.
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_ca_dir isn't part of profile xccdf_org.ssgproject.content_profile_stig requested by script ldap_tls_cacertdir_not_there.fail.sh.
INFO - Script ldap_tls_cacertdir_bad_value_conf_d.fail.sh using profile (all) OK
INFO - Script ldap_tls_cacertdir_conf_d.pass.sh using profile (all) OK
INFO - xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert
WARNING - Script ad_id_provider_and_reqcert_never.notapplicable.sh using profile (all) notapplicable
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert evaluation resulted in notapplicable
INFO - Script correct_value.pass.sh using profile (all) OK
INFO - Script correct_value_dropin.pass.sh using profile (all) OK
WARNING - Script id_provider_is_set_to_ad.notapplicable.sh using profile (all) notapplicable
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_configure_tls_reqcert evaluation resulted in notapplicable
INFO - Script ldap_id_provider_and_reqcert_never.fail.sh using profile (all) OK
INFO - Script ldap_tls_reqcert_not_there.fail.sh using profile (all) OK
INFO - Script correct_value_conf_d.pass.sh using profile (all) OK
INFO - Script ldap_id_provider_and_reqcert_never_conf_d.fail.sh using profile (all) OK
INFO - xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls
WARNING - Script ad_id_provider_and_tls_false.notapplicable.sh using profile (all) notapplicable
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls evaluation resulted in notapplicable
INFO - Script correct_value.pass.sh using profile (all) OK
WARNING - Script id_provider_is_set_to_ad.notapplicable.sh using profile (all) notapplicable
WARNING - Rule xccdf_org.ssgproject.content_rule_sssd_ldap_start_tls evaluation resulted in notapplicable
INFO - Script ldap_id_provider_and_tls_false.fail.sh using profile (all) OK
INFO - Script ldap_use_start_tls_not_there.fail.sh using profile (all) OK
INFO - Script correct_value_dropin.pass.sh using profile (all) OK
INFO - Script correct_value_conf_d.pass.sh using profile (all) OK
INFO - Script ldap_id_provider_and_tls_false_conf_d.fail.sh using profile (all) OK

openshift-ci bot added the needs-ok-to-test Used by openshift-ci bot. label Jan 24, 2024

jan-cerny self-assigned this Jan 25, 2024

jan-cerny added Update Rule Issues or pull requests related to Rules updates. Bash Bash remediation update. Ansible Ansible remediation update. labels Jan 25, 2024

jan-cerny added this to the 0.1.72 milestone Jan 25, 2024

jan-cerny reviewed Jan 25, 2024

View reviewed changes

Mab879 mentioned this pull request Jan 25, 2024

Update Select SSSD Rules for RHEL 7 STIG Update #11476

Merged

openshift-merge-robot added the needs-rebase Used by openshift-ci bot. label Jan 25, 2024

marcusburghardt modified the milestones: 0.1.72, 0.1.73 Jan 29, 2024

Xeicker added 4 commits January 30, 2024 16:57

Add tests to sssd-ldap rules

a09e9a6

Add tests to cover scenarios with configurations in files in /etc/sssd/conf.d/ directory Signed-off-by: Edgar Aguilar <edgar.aguilar@oracle.com>

Fix shellcheck warning on find command

9b71455

Signed-off-by: Edgar Aguilar <edgar.aguilar@oracle.com>

Fix tests on sssd-ldap

5537b5c

Signed-off-by: Edgar Aguilar <edgar.aguilar@oracle.com>

Xeicker force-pushed the update_sssd-ldap branch from 2c57d4f to 5537b5c Compare January 30, 2024 22:58

openshift-merge-robot removed the needs-rebase Used by openshift-ci bot. label Jan 30, 2024

jan-cerny approved these changes Jan 31, 2024

View reviewed changes

jan-cerny merged commit 57b9e50 into ComplianceAsCode:master Jan 31, 2024
35 of 38 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update sssd ldap related rules to check /etc/sssd/conf.d/*.conf files #11474

Update sssd ldap related rules to check /etc/sssd/conf.d/*.conf files #11474

Xeicker commented Jan 24, 2024

openshift-ci bot commented Jan 24, 2024

github-actions bot commented Jan 24, 2024

github-actions bot commented Jan 24, 2024 •

edited

Loading

jan-cerny Jan 25, 2024

Xeicker Jan 25, 2024

jan-cerny Jan 25, 2024

jan-cerny Jan 25, 2024

jan-cerny Jan 25, 2024

Xeicker Jan 25, 2024

jan-cerny Jan 25, 2024

codeclimate bot commented Jan 30, 2024

jan-cerny left a comment

Update sssd ldap related rules to check /etc/sssd/conf.d/*.conf files #11474

Update sssd ldap related rules to check /etc/sssd/conf.d/*.conf files #11474

Conversation

Xeicker commented Jan 24, 2024

Description:

Rationale:

Review Hints:

openshift-ci bot commented Jan 24, 2024

github-actions bot commented Jan 24, 2024

github-actions bot commented Jan 24, 2024 • edited Loading

jan-cerny Jan 25, 2024

Choose a reason for hiding this comment

Xeicker Jan 25, 2024

Choose a reason for hiding this comment

jan-cerny Jan 25, 2024

Choose a reason for hiding this comment

jan-cerny Jan 25, 2024

Choose a reason for hiding this comment

jan-cerny Jan 25, 2024

Choose a reason for hiding this comment

Xeicker Jan 25, 2024

Choose a reason for hiding this comment

jan-cerny Jan 25, 2024

Choose a reason for hiding this comment

codeclimate bot commented Jan 30, 2024

jan-cerny left a comment

Choose a reason for hiding this comment

github-actions bot commented Jan 24, 2024 •

edited

Loading