Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mitigation text for DNM controls is not copied over on a copy component workflow with new SRG #531

Closed
rlakey opened this issue Feb 3, 2023 · 2 comments · Fixed by #532
Closed
Labels
bug Something isn't working

Comments

@rlakey
Copy link
Contributor

rlakey commented Feb 3, 2023

The mitigation field is in the disa_rule_descriptions table so since we are duping this entire object from the new SRG it is overwriting any existing mitigations for DNM requirements.

@rlakey rlakey added the bug Something isn't working label Feb 3, 2023
@rlakey
Copy link
Contributor Author

rlakey commented Feb 3, 2023

Technically this was wiping out mitigations available, poam available, and poam as well but those really shouldn't have been in this table and neither should have mitigations. The fields outside of vulnerability discussion in the xccdf "description" node are not used and mitigations there is not the same as the mitigation field for a DNM requirement.

image

@rlakey
Copy link
Contributor Author

rlakey commented Feb 3, 2023

@rlakey rlakey linked a pull request Feb 3, 2023 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant