RHEL7 CCE assignments for CCP profile #260
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Renaming RHEL CCE file to reflect CCEs are for all of RHEL
process:
[shawnw@ssgdev-rhel7 references]$ git mv cce-rhel6-avail.txt cce-rhel-avail.txt
[shawnw@ssgdev-rhel7 references]$ cd ../../
[shawnw@ssgdev-rhel7 scap-security-guide]$ grep -rin cce-rhel6-avail.txt *
RHEL/6/utils/verify-cce.py:29:with open('../references/cce-rhel6-avail.txt', 'r') as txt_file:
[shawnw@ssgdev-rhel7 scap-security-guide]$ sed -i 's/cce-rhel6-avail.txt/cce-rhel-avail.txt/g' RHEL/6/utils/verify-cce.py
Note that I did skip the IPTables rules, as these will be going away.
|
Also, dropped the DISA mappings as RHEL7 will follow their new SRG, so can not reuse RHEL6 mappings |
|
@redhatrises or @iankko can you review this PR before the others? it's setting off the merge conflicts once ack I'll do the merge by hand |
|
|
thanks @iankko. merged & closing |
jan-cerny
added a commit
to jan-cerny/scap-security-guide
that referenced
this pull request
Jan 18, 2021
It says that Tasks that run when changed should likely be handlers. However, we don't use handlers, and developer guide says that handlers aren't supported. I assume handlers would cause problems for SCAP scanners. Unless we start to support handlers this error isn't fixable for us therefore we can suppress it globally. Addressing problems in scap-security-guide-lint-check Jenkins job: 30/48 Test ComplianceAsCode#260: ansible-playbook-ansible-lint-check-rhel8 .........***Failed 630.77 sec all/sudo_add_umask.yml:30: [E503] Tasks that run when changed should likely be handlers anssi_bp28_enhanced/sudo_add_umask.yml:30: [E503] Tasks that run when changed should likely be handlers anssi_bp28_high/sudo_add_umask.yml:30: [E503] Tasks that run when changed should likely be handlers anssi_bp28_intermediary/sudo_add_umask.yml:30: [E503] Tasks that run when changed should likely be handlers
brett060102
added a commit
to brett060102/content
that referenced
this pull request
Apr 2, 2021
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.