ComplianceAsCode / ComplianceAsCode/content

`crypto_policy_not_overridden` is misaligned with DISA

Open
#14,745 0 comments 0 reactions 0 assignees View on GitHub
productization-issue triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

The testing environment does not contain the openscap-engine-sce package therefore it doesn't check the rule that only contains SCE content.

If we install the package, the check would pass and would still be misaligned with DISA results because DISA's content checks for the symlinks which for the FIPS:STIG crypto policy does not work since subpolicy always copy the files to the config locations instead of symlinks.

```
9.8 fail /scanning/disa-alignment/oscap crypto_policy_not_overridden SSG result: notchecked, DISA result(s): SV-258236r1101920_rule:fail
9.8 fail /scanning/disa-alignment/anaconda crypto_policy_not_overridden SSG result: notchecked, DISA result(s): SV-258236r1101920_rule:fail
9.8 fail /scanning/disa-alignment/ansible crypto_policy_not_overridden SSG result: notchecked, DISA result(s): SV-258236r1101920_rule:fail
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.