ComplianceAsCode / ComplianceAsCode/content

RHEL-8-V2R4: DISA STIG specifies 0640 but OpenSCAP audit logic enforces 0600

Open
#14,523 2 comments 0 reactions 0 assignees View on GitHub
triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

DISA STIG specifies that /var/log/messages must have permission 0640 or less permissive.
However, the OpenSCAP RHEL 8 STIG profile audits specifically for permission mode 0600, resulting in a mismatch with the documented STIG requirement.

#### Details:

DISA STIG requirement:
/var/log/messages must have mode 0640 or less permissive.
OpenSCAP audit expectation:
Permission mode 0600
The misalignment affects these rules:

The misalignment affects this profile:

- RHEL-08 V2R1-V2R4 STIG

The misalignment affects this rule:

- RHEL-08-010210

#### Outcome:

The OpenSCAP tests are corrected to look for the correct audit rule

#### SCAP Security Guide Version: https://github.com/ComplianceAsCode/content/releases/tag/v0.1.79

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.