Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

directory_permissions_sshd_config_d misaligned with STIG #13021

Open
vojtapolasek opened this issue Feb 11, 2025 · 1 comment
Open

directory_permissions_sshd_config_d misaligned with STIG #13021

vojtapolasek opened this issue Feb 11, 2025 · 1 comment
Labels
blocked Issue that can't be fixed in content. productization-issue Issue found in upstream stabilization process. RHEL9 Red Hat Enterprise Linux 9 product related. STIG STIG Benchmark related.

Comments

@vojtapolasek
Copy link
Collaborator

Description of problem:

The problem lies in the DISA STIG SCAP content not being aligned with the prose.
The following STIG is important: https://stigaview.com/products/rhel9/v2r3/RHEL-09-255115/
Note that in the "Check" part, the directory has permissions of 700, e.g. RWX. It needs the X permissions so that it can be entered.
However, the SCAP check provided by DISA fails in this case, it passes if permissions are 600 (RW-) for the directory.
This needs to be fixed in the SCAP content.

SCAP Security Guide Version:

master as of 2025-02-10

External Content's Version:

v2r3

@vojtapolasek vojtapolasek added blocked Issue that can't be fixed in content. productization-issue Issue found in upstream stabilization process. RHEL9 Red Hat Enterprise Linux 9 product related. STIG STIG Benchmark related. labels Feb 11, 2025
vojtapolasek added a commit to vojtapolasek/contest that referenced this issue Feb 11, 2025
@jan-cerny
Copy link
Collaborator

This problem has also manifested in daily productization today. current upstream master HEAD as of 2025-02-11 as of 8ec16c5

matusmarhefka pushed a commit to RHSecurityCompliance/contest that referenced this issue Feb 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
blocked Issue that can't be fixed in content. productization-issue Issue found in upstream stabilization process. RHEL9 Red Hat Enterprise Linux 9 product related. STIG STIG Benchmark related.
Projects
None yet
Development

No branches or pull requests

2 participants