ComplianceAsCode / ComplianceAsCode/content
RHEL-8-V2R4: DISA STIG specifies 0640 but OpenSCAP audit logic enforces 0600
- Dominant language
- Shell
- Stars
- 2.8k
- Forks
- 828
- Avg merge
- 3d 8m
- Merged PRs (30d)
- 80
Description
#### Description of problem:
DISA STIG specifies that /var/log/messages must have permission 0640 or less permissive.
However, the OpenSCAP RHEL 8 STIG profile audits specifically for permission mode 0600, resulting in a mismatch with the documented STIG requirement.
#### Details:
DISA STIG requirement:
/var/log/messages must have mode 0640 or less permissive.
OpenSCAP audit expectation:
Permission mode 0600
The misalignment affects these rules:
The misalignment affects this profile:
- RHEL-08 V2R1-V2R4 STIG
The misalignment affects this rule:
- RHEL-08-010210
#### Outcome:
The OpenSCAP tests are corrected to look for the correct audit rule
#### SCAP Security Guide Version: https://github.com/ComplianceAsCode/content/releases/tag/v0.1.79
Contributor guide
Assessment
This issue has not been assessed yet.