Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update few sysctl rules to accept multiple compliant values #9286

Merged
merged 5 commits into from
Aug 4, 2022
Merged

Update few sysctl rules to accept multiple compliant values #9286

merged 5 commits into from
Aug 4, 2022

Commits on Aug 3, 2022

  1. Make rule sysctl ipv4 rp_filter accept two values 

    This also removes value '0' from the list of possible configurations.
This change aligns the rule better with STIG.
    @yuumasato
    yuumasato committed Aug 3, 2022
    Configuration menu
    Copy the full SHA
    f647d54 View commit details
    Browse the repository at this point in the history

  2. Make rule for kptr_restrict accept two values 

    This also removes value '0' from the list of possible configurations.
This change aligns the rule better with STIG.
    @yuumasato
    yuumasato committed Aug 3, 2022
    Configuration menu
    Copy the full SHA
    f903b6b View commit details
    Browse the repository at this point in the history

  3. Remove variable selector that will result in error 

    The rule only accepts values 1 or 2 as compliant, the XCCDF Variable
cannot have the value 0, it will never result in pass.
    @yuumasato
    yuumasato committed Aug 3, 2022
    Configuration menu
    Copy the full SHA
    932d00c View commit details
    Browse the repository at this point in the history

  4. Restrict sysctl multivalue compliance to rhel and ol 

    For now, the only STIGs I see that adopted this change were RHEL's and
OL's.
    @yuumasato
    yuumasato committed Aug 3, 2022
    Configuration menu
    Copy the full SHA
    7127380 View commit details
    Browse the repository at this point in the history

  5. Update OCIL check along with the rule 

    The OCIL should should mention both compliant values.
    @yuumasato
    yuumasato committed Aug 3, 2022
    Configuration menu
    Copy the full SHA
    a159f7d View commit details
    Browse the repository at this point in the history