ComplianceAsCode / ComplianceAsCode/content

RHEL-8-V2R4:- DISA STIG specifies 0740 but OpenSCAP profile audits for 0600

Open
#14,521 3 comments 0 reactions 0 assignees View on GitHub
triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

DISA STIG specifies that local initialization
files must have permission 0740 or less permissive.
However, the OpenSCAP profile audits for permission mode 0600.
#### Details:
DISA STIG requirement:
0740 or less permissive
OpenSCAP audit expectation:
0600

The misalignment affects this profile:

- RHEL-08-010770

The misalignment affects this rule:

- RHEL-08-010770

#### Outcome:

- [ ] This project's content can be improved:
- [ ] Check needs to be improved.
- [ ] Remediation needs to be improved.
- [ ] The external content's check is faulty - the other party needs to be notified, they have work to do.

#### SCAP Security Guide Version: https://github.com/ComplianceAsCode/content/releases/tag/v0.1.79

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.