Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Import SRG content for RHEL9 #9574

Merged
merged 17 commits into from
Oct 11, 2022
Merged

Import SRG content for RHEL9 #9574

Show file tree
Hide file tree
Changes from 16 commits
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
2e2af47
Import STIG content for RHEL9
Mab879 Sep 30, 2022
5b5309d
Update Rule.read_policy_specific_content to handle None env_yaml
Mab879 Sep 27, 2022
8b20249
Only load policy specific content if the rule doesn't already have it
Mab879 Sep 27, 2022
8757f97
Fix vuldiscussion in SRG export
Mab879 Sep 30, 2022
28476e7
Add SRG Diff script
Mab879 Oct 4, 2022
d80ac04
Add docs for utils/srg_diff.py
Mab879 Oct 4, 2022
fc93eaa
Add some more formatting to 05_tools_and_utilities.md
Mab879 Oct 4, 2022
ed7c8f1
Fix handling of < and > in the import_srg script
Mab879 Oct 4, 2022
5a1c005
Reduce the pickyness of radon for codeclimate
Mab879 Oct 4, 2022
8ccdb0c
Fix Code Climate issues
Mab879 Oct 4, 2022
d106fa0
Fix up mdl findings docs/manual/developer/05_tools_and_utilities.md
Mab879 Oct 4, 2022
b164193
Fix more Code Climate issues
Mab879 Oct 5, 2022
963563b
Fix SRG Diff html to be smaller
Mab879 Oct 5, 2022
97b2396
Use rule id in SRG Diff for missing rules
Mab879 Oct 5, 2022
c222df9
Minor bug fix for srg diff
Mab879 Oct 5, 2022
8d0bd2d
Add rule id to titles for srg_diff
Mab879 Oct 5, 2022
b1d853f
Fix issues found in code review for #9574
Mab879 Oct 5, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
2 changes: 2 additions & 0 deletions .codeclimate.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,8 @@ plugins:
enabled: true
radon:
enabled: true
config:
threshold: "C"
sonar-python:
enabled: true
shellcheck:
Expand Down
1 change: 0 additions & 1 deletion controls/srg_gpos/SRG-OS-000163-GPOS-00072.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,6 @@ controls:
- sshd_set_keepalive_0
- accounts_tmout
- var_accounts_tmout=10_min
status: does not meet
status_justification: |-
{{{ full_name }}} does not have configuration options to
meet this requirement. There is no option to configure sshd timeout
Expand Down
1 change: 1 addition & 0 deletions controls/srg_gpos/SRG-OS-000392-GPOS-00172.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -59,6 +59,7 @@ controls:
- audit_rules_privileged_commands_postdrop
- audit_rules_privileged_commands_postqueue
- audit_rules_privileged_commands_pt_chown
- audit_rules_execution_restorecon
- audit_rules_privileged_commands_ssh_agent
- audit_rules_privileged_commands_ssh_keysign
- audit_rules_privileged_commands_su
Expand Down
3 changes: 2 additions & 1 deletion controls/srg_gpos/SRG-OS-000480-GPOS-00227.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -115,6 +115,7 @@ controls:
- mount_option_noexec_removable_partitions
- mount_option_nosuid_removable_partitions
- mount_option_krb_sec_remote_filesystems
- use_kerberos_security_all_exports

# sshd config
- sshd_disable_compression
Expand Down Expand Up @@ -225,7 +226,7 @@ controls:
- postfix_prevent_unrestricted_relay
- set_firewalld_default_zone
- firewalld_sshd_port_enabled

# misc
- enable_authselect
- no_host_based_files
Expand Down
Loading