ComplianceAsCode / ComplianceAsCode/content

RHEL 9 grub rules are misaligned with DISA

Open
#13,548 0 comments 0 reactions 0 assignees View on GitHub
triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

The content is misaligned with an external (third party) content that targets the same policy - typically, this means that a system hardened by our content doesn't pass the scan by the external content.

The STIG and STIG with GUI profiles only include the BIOS version of the grub rules. The rules are skipped on UEFI systems.

#### Details:

This content is not aligned with content from DISA

The misalignment affects these profiles:

- STIG
- STIG with GUI

The misalignment affects these rules:

- STIG ID: RHEL-09-212010
- grub2_uefi_password
- grub2_uefi_admin_username
- grub2_password
- grub2_admin_username

#### Outcome:

- [ ] This project's content can be improved:
- [ ] Check needs to be improved.
- [ ] Remediation needs to be improved.
- [ ] The external content's check is faulty - the other party needs to be notified, they have work to do.

#### SCAP Security Guide Version: 0.1.77

#### External Content's Version: v2r4

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.