Code

Add RHEL 9 STIG#11193

Code

Merged

vojtapolasek merged 68 commits intoComplianceAsCode:masterComplianceAsCode/content:masterfrom Mab879:add_rhel9_stigMab879/content:add_rhel9_stigCopy head branch name to clipboardOct 31, 2023

+11,823-48

Commits

Commits on Oct 18, 2023

• First draft of utils/add_stigid_from_csv.py

  Mab879

  committed
  52eda97

  Copy full SHA for 52eda97

• Improve the import script.

  Mab879

  committed
  b07cc36

  Copy full SHA for b07cc36

• Add RHEL 9 STIG IDs

  Mab879

  committed
  0bc66b3

  Copy full SHA for 0bc66b3

• Add the RHEL 9 STIG Control File

  Mab879

  committed
  dcc50d7

  Copy full SHA for dcc50d7

• Move the RHEL 9 STIG to the RHEL 9 STIG Control File

  Mab879

  committed
  caefaaf

  Copy full SHA for caefaaf

• Fix RHEL 9 STIG ID for RHEL-09-215060

  Mab879

  committed
  94035e0

  Copy full SHA for 94035e0

• Add RHEL 9 STIGID for service_debug-shell_disabled

  Mab879

  committed
  19356de

  Copy full SHA for 19356de

• Format add variables for the RHEL 9 STIG

  Mab879

  committed
  df7cbb3

  Copy full SHA for df7cbb3

• Add tests for RHEL 9 STIG control file

  Mab879

  committed
  725ecf6

  Copy full SHA for 725ecf6

• Add rekey variables

  Mab879

  committed
  ed468b1

  Copy full SHA for ed468b1

• Add umask variable

  Mab879

  committed
  d4dcd08

  Copy full SHA for d4dcd08

• Add PAM variables

  Mab879

  committed
  c7926d3

  Copy full SHA for c7926d3

• Add SELinux vars for the RHEL 9 STIG

  Mab879

  committed
  0348d73

  Copy full SHA for 0348d73

• Add sshd_idle_timeout_value var to RHEL 9

  Mab879

  committed
  b6d8fcb

  Copy full SHA for b6d8fcb

• Add failock vars for RHEL 9 STIG

  Mab879

  committed
  efb5fe7

  Copy full SHA for efb5fe7

• Add password vars for RHEL 9 STIG

  Mab879

  committed
  c3c2867

  Copy full SHA for c3c2867

• Add enable_authselect rule to RHEL 9 STIG

  Mab879

  committed
  f85dbb0

  Copy full SHA for f85dbb0

• Update RHEL 9 STIG FIPS rule

  Mab879

  committed
  0fede69

  Copy full SHA for 0fede69

• Fix Needed rules for RHEL 9 STIG

  Mab879

  committed
  831c71c

  Copy full SHA for 831c71c

• Add var for chronyd_or_ntpd_set_maxpoll to RHEL 9 STIG

  Mab879

  committed
  13ee2b5

  Copy full SHA for 13ee2b5

• Fix var_accounts_authorized_local_users_regex

  Mab879

  committed
  10cc0e0

  Copy full SHA for 10cc0e0

• Add var_accounts_maximum_age_login_defs vars for RHEL 9 STIG

  Mab879

  committed
  cc3783b

  Copy full SHA for cc3783b

• Add var_sssd_certificate_verification_digest_function for RHEL 9 STIG

  Mab879

  committed
  7257864

  Copy full SHA for 7257864

• Fix var_auditd_max_log_file_action

  Mab879

  committed
  21e26ce

  Copy full SHA for 21e26ce

• Add package_s-nail_installed to RHEL 9 STIG

  Mab879

  committed
  586a4c3

  Copy full SHA for 586a4c3

• Add rules for RHEL-09-232225 in RHEL 9 STIG

  Mab879

  committed
  e4d81b6

  Copy full SHA for e4d81b6

• Add rules for RHEL-09-232230 in the RHEL 9 STIG

  Mab879

  committed
  e057f68

  Copy full SHA for e057f68

• Ensure that spacing is correct for all controls in RHEL 9 STIG

  Mab879

  committed
  e5ab1c7

  Copy full SHA for e5ab1c7

• Fix rule assignment for RHEL-09-231150

  Mab879

  committed
  c26a958

  Copy full SHA for c26a958

• Add STIG ID to file_audit_tools_group_ownership

  Mab879

  committed
  3bb5650

  Copy full SHA for 3bb5650

• Add RHEL 9 STIG manual

  Mab879

  committed
  effbdb3

  Copy full SHA for effbdb3

• Fix STIGID for package_s-nail_installed in RHEL 9

  Mab879

  committed
  884e357

  Copy full SHA for 884e357

• Fix mix up with STIG IDs for RHEL 9 on /var/log mount opts

  Mab879

  committed
  be91ca4

  Copy full SHA for be91ca4

• Add second RHEL 9 STIG for configure_crypto_policy

  Mab879

  committed
  5945719

  Copy full SHA for 5945719

• Add STIGID to cro file_owner_* rules

  Mab879

  committed
  803832f

  Copy full SHA for 803832f

• Update controlrefcheck script for STIGIDs

  Mab879

  committed
  03e6b3d

  Copy full SHA for 03e6b3d

• Exclude enable_authselect from the refcheck on RHEL 9 STIG

  Show description for c87c283
  Mab879

  committed
  c87c283

  Copy full SHA for c87c283

• Add more rules for RHEL-09-654065

  Mab879

  committed
  11b46c6

  Copy full SHA for 11b46c6

• Add more rules for RHEL-09-654070

  Mab879

  committed
  8d00881

  Copy full SHA for 8d00881

• Add rule for RHEL-09-654080

  Mab879

  committed
  2804dfb

  Copy full SHA for 2804dfb

• Add more rules for RHEL-09-654020

  Mab879

  committed
  dba7d6d

  Copy full SHA for dba7d6d

• Add more rules for RHEL-09-654015

  Mab879

  committed
  1540ac9

  Copy full SHA for 1540ac9

• Add more rules for RHEL-09-412020

  Mab879

  committed
  ef49727

  Copy full SHA for ef49727

• Add more rules for RHEL-09-654025

  Mab879

  committed
  9f43c6f

  Copy full SHA for 9f43c6f

• Add rule for RHEL-09-211025

  Mab879

  committed
  b4522f3

  Copy full SHA for b4522f3

• Adjust rule for RHEL-09-212040

  Mab879

  committed
  bb49a3c

  Copy full SHA for bb49a3c

• Adjust rule for RHEL-09-213040

  Mab879

  committed
  c78f532

  Copy full SHA for c78f532

• Add rule for RHEL-09-252020

  Mab879

  committed
  c15d021

  Copy full SHA for c15d021

• Add rule for RHEL-09-232230

  Mab879

  committed
  1029516

  Copy full SHA for 1029516

• Add rule for RHEL-09-232235

  Mab879

  committed
  12769d2

  Copy full SHA for 12769d2

• Add rule for RHEL-09-252040

  Mab879

  committed
  f4dca1d

  Copy full SHA for f4dca1d

• Adjust rule for RHEL-09-253075

  Mab879

  committed
  0dec77a

  Copy full SHA for 0dec77a

• Updated rule selection for RHEL-09-271090

  Mab879

  committed
  8d4020d

  Copy full SHA for 8d4020d

• Remove add_stigid_from_csv

  Show description for c492fb0
  Mab879

  committed
  c492fb0

  Copy full SHA for c492fb0

• Fix Codeclimate issues

  Mab879

  committed
  6ed1697

  Copy full SHA for 6ed1697

Commits on Oct 23, 2023

• Pull rpm_verify_hashes from RHEL-09-214030

  Show description for 08fe79f
  Mab879

  committed
  08fe79f

  Copy full SHA for 08fe79f

• Move RHEL-09-672030 to configure_crypto_policy

  Show description for af60d32
  Mab879

  committed
  af60d32

  Copy full SHA for af60d32

Commits on Oct 24, 2023

• Pull service_rngd_enabled from the RHEL 9 STIG

  Show description for 4f94bd9
  Mab879

  committed
  4f94bd9

  Copy full SHA for 4f94bd9

Commits on Oct 25, 2023

• Update on RHEL 9 STIG based on code review

  Mab879

  committed
  39bcbcd

  Copy full SHA for 39bcbcd

• Move RHEL 9 STIG Refchecker back to the macro

  Show description for f94c36a
  Mab879

  committed
  f94c36a

  Copy full SHA for f94c36a

Commits on Oct 27, 2023

• Ensure RHEL 9 STIG version is in all right places

  Mab879

  committed
  20ba6c7

  Copy full SHA for 20ba6c7

• Fix formatting in the RHEL 9 STIG Control File

  Mab879

  committed
  577e6b0

  Copy full SHA for 577e6b0

• Add RHEL 9 regex for var_accounts_authorized_local_users_regex

  Mab879

  committed
  32a5fc7

  Copy full SHA for 32a5fc7

• Add aide_scan_notification to RHEL-09-651015

  Mab879

  committed
  22dc9e9

  Copy full SHA for 22dc9e9

• Update rule mapping for RHEL-09-654180

  Mab879

  committed
  a9e264b

  Copy full SHA for a9e264b

• Fix rule mapping for RHEL-09-271030 and RHEL-09-271035

  Mab879

  committed
  835773f

  Copy full SHA for 835773f

• Fix rule mapping for RHEL-09-213075

  Mab879

  committed
  0ab9908

  Copy full SHA for 0ab9908

Commits on Oct 30, 2023

• Update RHEL 9 STIG IDs based on feedback

  Mab879

  committed
  4522aef

  Copy full SHA for 4522aef