Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update RHEL 8 STIG to V2R1 #12550

Merged
merged 7 commits into from
Oct 30, 2024
Merged

Update RHEL 8 STIG to V2R1 #12550

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
c213880
Update XCCDF Manual for RHEL 8 STIG
Mab879 Oct 28, 2024
7bf7a9b
Add `and not runtime_kernel_fips_enabled` to package_rng-tools_installed
Mab879 Oct 28, 2024
7c63ece
Adjust timeout for RHEL-08-020035
Mab879 Oct 28, 2024
9a61d85
Update RHEL 8 STIG to V2R1
Mab879 Oct 28, 2024
61f61fe
Update RHEL 8 SCAP XCCDF file for V2R1
Mab879 Oct 28, 2024
b2ade0c
Update STIG version for RHEL 8
Mab879 Oct 28, 2024
c7e407e
Update RHEL 8 versions in test stability
Mab879 Oct 29, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion linux_os/guide/system/software/system-tools/package_rng-tools_installed/rule.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ fixtext: '{{{ fixtext_package_installed("rng-tools") }}}'

srg_requirement: '{{{ srg_requirement_package_installed("rng-tools") }}}'

platform: system_with_kernel
platform: system_with_kernel and not runtime_kernel_fips_enabled

template:
name: package_installed
Expand Down
6 changes: 3 additions & 3 deletions products/rhel8/profiles/stig.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
documentation_complete: true

metadata:
version: V1R14
version: V2R1
SMEs:
- mab879
- ggbecker
Expand All @@ -12,7 +12,7 @@ title: 'DISA STIG for Red Hat Enterprise Linux 8'

description: |-
This profile contains configuration checks that align to the
DISA STIG for Red Hat Enterprise Linux 8 V1R14.
DISA STIG for Red Hat Enterprise Linux 8 V2R1.

In addition to being applicable to Red Hat Enterprise Linux 8, DISA recognizes this
configuration baseline as applicable to the operating system tier of
Expand Down Expand Up @@ -547,7 +547,7 @@ selections:

# RHEL-08-020035
- logind_session_timeout
- var_logind_session_timeout=15_minutes
- var_logind_session_timeout=10_minutes

# RHEL-08-020039
- package_tmux_installed
Expand Down
4 changes: 2 additions & 2 deletions products/rhel8/profiles/stig_gui.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
documentation_complete: true

metadata:
version: V1R14
version: V2R1
SMEs:
- mab879
- ggbecker
Expand All @@ -12,7 +12,7 @@ title: 'DISA STIG with GUI for Red Hat Enterprise Linux 8'

description: |-
This profile contains configuration checks that align to the
DISA STIG with GUI for Red Hat Enterprise Linux 8 V1R14.
DISA STIG with GUI for Red Hat Enterprise Linux 8 V2R1.

In addition to being applicable to Red Hat Enterprise Linux 8, DISA recognizes this
configuration baseline as applicable to the operating system tier of
Expand Down
1,533 changes: 702 additions & 831 deletions ...es/disa-stig-rhel8-v1r14-xccdf-manual.xml → ...ces/disa-stig-rhel8-v2r1-xccdf-manual.xml
View file
Open in desktop

Large diffs are not rendered by default.

1,827 changes: 794 additions & 1,033 deletions ...nces/disa-stig-rhel8-v1r13-xccdf-scap.xml → ...ences/disa-stig-rhel8-v2r1-xccdf-scap.xml
View file
Open in desktop

Large diffs are not rendered by default.

6 changes: 3 additions & 3 deletions tests/data/profile_stability/rhel8/stig.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
description: 'This profile contains configuration checks that align to the

DISA STIG for Red Hat Enterprise Linux 8 V1R14.
DISA STIG for Red Hat Enterprise Linux 8 V2R1.


In addition to being applicable to Red Hat Enterprise Linux 8, DISA recognizes
Expand All @@ -23,7 +23,7 @@ description: 'This profile contains configuration checks that align to the
extends: null
hidden: ''
metadata:
version: V1R14
version: V2R1
SMEs:
- mab879
- ggbecker
Expand Down Expand Up @@ -492,7 +492,7 @@ selections:
- var_slub_debug_options=P
- var_user_initialization_files_regex=all_dotfiles
- var_screensaver_lock_delay=5_seconds
- var_logind_session_timeout=15_minutes
- var_logind_session_timeout=10_minutes
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

in this file you should also change the version

- var_auditd_name_format=stig
unselected_groups: []
platforms: !!set {}
Expand Down
6 changes: 3 additions & 3 deletions tests/data/profile_stability/rhel8/stig_gui.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
description: 'This profile contains configuration checks that align to the

DISA STIG with GUI for Red Hat Enterprise Linux 8 V1R14.
DISA STIG with GUI for Red Hat Enterprise Linux 8 V2R1.


In addition to being applicable to Red Hat Enterprise Linux 8, DISA recognizes
Expand Down Expand Up @@ -34,7 +34,7 @@ description: 'This profile contains configuration checks that align to the
extends: null
hidden: ''
metadata:
version: V1R14
version: V2R1
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the version should be also changed in the description

SMEs:
- mab879
- ggbecker
Expand Down Expand Up @@ -498,7 +498,7 @@ selections:
- var_slub_debug_options=P
- var_user_initialization_files_regex=all_dotfiles
- var_screensaver_lock_delay=5_seconds
- var_logind_session_timeout=15_minutes
- var_logind_session_timeout=10_minutes
- var_auditd_name_format=stig
unselected_groups: []
platforms: !!set {}
Expand Down
Loading