[Ubuntu 22.04] Add missing stigid@ubuntu2204 references: Kernel Modules (UBTU-22-291000 to 291099)#14471
Conversation
Add missing stigid@ubuntu2204 entries to 2 rule.yml files for DISA Ubuntu 22.04 STIG V2R7 Kernel Modules controls. Without these references, OpenSCAP scan results cannot be mapped to DISA UBTU-22-XXXXXX checklist items in STIG Viewer (CKL export produces blank Rule ID fields). Entries follow the same pattern as existing stigid@ol8, stigid@sle12, and stigid@sle15 references. Authoritative UBTU-22-XXXXXX IDs sourced from controls/stig_ubuntu2204.yml.
|
Hi @hdean3. Thanks for your PR. I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
Closing to reset fork and CI queue. Will re-submit in small batches (2-3 at a time) after PR #14511 receives /ok-to-test from a maintainer. |
Problem
The ComplianceAsCode Ubuntu 22.04 STIG profile cannot map OpenSCAP scan results to DISA STIG checklist items in STIG Viewer. CKL exports have blank Rule ID fields for Ubuntu 22.04 rules.
Root cause: Rule.yml files are missing
stigid@ubuntu2204:entries.Solution
Add
stigid@ubuntu2204: UBTU-22-XXXXXXto 2 rule.yml files for DISA Ubuntu 22.04 STIG V2R7 Kernel Modules controls (UBTU-22-291000 to 291099):kernel_module_usb-storage_disabled→ UBTU-22-291010wireless_disable_interfaces→ UBTU-22-291015All UBTU-22 IDs sourced from
controls/stig_ubuntu2204.yml.Series
Final PR in a series — all 9: #14463 (Auditing, 96 rules), #14464 (Password Policy, 24), #14465 (Account Mgmt, 21), #14466 (File Perms, 31), #14467 (Networking, 17), #14468 (Software, 10), #14469 (System Config, 9), #14470 (GNOME, 6), this PR (Kernel Modules, 2). Total: 230 rule.yml files.