ComplianceAsCode / ComplianceAsCode/content

RHEL-9-V2R6:The control is being implemented as required by the STIG but it is flagging as a failure by OpenSCAP

Open
#14,598 2 comments 0 reactions 0 assignees View on GitHub
triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

DISA STIG BENCHMARK specifies setting local initialization files to mode "0740", but OpenSCAP audit logic checks for tmpfiles.d configuration instead, resulting in a mismatch between documented STIG requirement and audit.

#### Details:
DISA STIG BENCHMARK implemented as per "Set the mode of the local initialization files to '0740'"
OpenSCAP fails the audit because it expects tmpfiles.d configuration

The misalignment affects these profiles:

RHEL-09 V2R1-V2R6 STIG

The misalignment affects these rules:
RHEL-09-232045

Outcome:
The OpenSCAP tests are corrected to look for the correct audit rule

SCAP Security Guide Version: https://github.com/ComplianceAsCode/content/releases/tag/v0.1.79

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.