ComplianceAsCode / ComplianceAsCode/content

rpm_verify_permissions is failing in RHEL after pci-dss hardening

Open
#11,285 0 comments 0 reactions 0 assignees View on GitHub
pci-dss RHEL triaged unclear
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

This error was caught in `test-farm` tests using the `pci-dss v4` profile.
By looking the tests logs it was not found which file was making the `rpm_verify_permissions` rule to fail after pci-dss remediation and reboot.

More tests are needed to clarify and solve this issue.

#### SCAP Security Guide Version:

During the tests with PR #11267

#### Operating System Version:

RHEL 7, RHEL 8 and RHEL 9

#### Steps to Reproduce:

1. Scan a RHEL system using pci-dss profile.
1.1. The `rpm_verify_permissions` rule pass while many other rules fail, as expected.
2. Remediate the system using pci-dss profile
3. Reboot the system
4. Scan a RHEL system using pci-dss profile.
4. 1. The `rpm_verify_permissions` rule fails

#### Actual Results:

`rpm_verify_permissions` fails after pci-dss remediation

#### Expected Results:

`rpm_verify_permissions` pass after pci-dss remediation

#### Additional Information/Debugging Steps:

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.