-
Notifications
You must be signed in to change notification settings - Fork 749
Align RHEL 8 CIS control file with CIS v3.0.0 - Section 6 #11462
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Align RHEL 8 CIS control file with CIS v3.0.0 - Section 6 #11462
Conversation
Skipping CI for Draft Pull Request. |
Code Climate has analyzed commit 2981f85 and detected 0 issues on this pull request. The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 58.5% (0.0% change). View more on Code Climate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM.
The Fedora Rawhide failures are expected and can be waived.
|
||
- id: 6.1.5 | ||
- id: 6.1.3 | ||
title: Ensure permissions on /etc/security/opasswd are configured (Automated) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I will note the this is a deviation from the benchmark, but I think it makes sense.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, the description is ok but the title is not correct in the policy. I saw it was already updated for a future release: https://workbench.cisecurity.org/sections/2299710/recommendations/3684693
Description:
In this PR, we change the control file, change references, add existing rules. But, we don't add new rules, and we don't modify other content.
Align RHEL 8 CIS control file with CIS v3.0.0 - Section 6.