You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The STIG states that the finding will always be open, but the severity level changes depending on the result of the check.
The STIG itself is marked as a XCDDF severity="low", but the Check Text states that it's a CAT-II unless the mcafeetp package is installed and running.
The Inspec baseline incorrectly marks this as an open CAT-III if the package is not installed or not running. It also incorrectly marks this as closed if the package is installed and running.
The SV-238336.rb file should be changed to mark this as an open impact 0.5 if mcafeetp is not installed or not running.
It should mark this control as an open impact 0.3 if the package is installed and running.
The text was updated successfully, but these errors were encountered:
This STIG control is somewhat confusing.
The STIG states that the finding will always be open, but the severity level changes depending on the result of the check.
The STIG itself is marked as a XCDDF
severity="low"
, but the Check Text states that it's a CAT-II unless themcafeetp
package is installed and running.The Inspec baseline incorrectly marks this as an open CAT-III if the package is not installed or not running. It also incorrectly marks this as closed if the package is installed and running.
The
SV-238336.rb
file should be changed to mark this as an openimpact 0.5
ifmcafeetp
is not installed or not running.It should mark this control as an open
impact 0.3
if the package is installed and running.The text was updated successfully, but these errors were encountered: