ComplianceAsCode / ComplianceAsCode/content
no_shelllogin_for_systemaccounts is misaligned with DISA
Open
blocked
productization-issue
RHEL9
STIG
triaged
- Dominant language
- Shell
- Stars
- 2.8k
- Forks
- 828
- Avg merge
- 3d 8m
- Merged PRs (30d)
- 80
Description
#### Description of problem:
no_shelllogin_for_systemaccounts is misaligned with DISA
#### Details:
Needs broader investigation. At the first sight it seems that the SSG check is more complex and allows more different "shell" names whereas DISA allows only `/sbin/nologin`.
#### Outcome:
SSG result: pass
DISA result: fail
The issue is present in these test variants:
- oscap
- ansible
- anaconda
#### SCAP Security Guide Version:
Current upstream master as of 2024-03-12 as of HEAD cbbca44.
#### External Content's Version:
DISA STIG RHEL 9 V1R1
Contributor guide
Assessment
This issue has not been assessed yet.