Code

rewrite of SV-204392#201

Code

Open

Amndeep7 wants to merge 76 commits intomainmitre/redhat-enterprise-linux-7-stig-baseline:mainfrom SV-204392_rewritemitre/redhat-enterprise-linux-7-stig-baseline:SV-204392_rewriteCopy head branch name to clipboard

+4,542-3,829

Commits

Commits on Apr 12, 2023

• format using SAF CLI with ts-inspec-objects on branch updatesToRubyProcess

  Show description for a760059
  

  Emily Rodriguez

  committed
  a760059

• manual updates for updating formating

  Show description for 84a0258
  

  Emily Rodriguez

  committed
  84a0258

Commits on Apr 13, 2023

• only a ref added, otherwise no updates

  Show description for 619ed23
  

  Emily Rodriguez

  committed
  619ed23

• Removed tag 'rationale' from SV-204442

  Show description for 85def38
  karikarshivani

  committed
  85def38

• adding controls that are updated with only small changes after running the delta update, such as adding a ref tag, updating rule id, adding a nist id, or so on, not requiring logic change

  Show description for 1db563d
  

  Emily Rodriguez

  committed
  1db563d

Commits on Apr 14, 2023

• Pointing to saf_action@main instead of saf_action@v1 to test the workflow

  Show description for 99bcdfb
  karikarshivani

  committed
  99bcdfb

Commits on Apr 17, 2023

• add the metadata changes for controls which need reviewed and may need describe block updates

  Show description for ba0198b
  

  Emily Rodriguez

  committed
  ba0198b

• Merge pull request #187 from mitre/formatForDelta

  Show description for 6f95784
  karikarshivani

  authored
  6f95784

• Merge branch 'main' into V3R10

  karikarshivani

  authored
  3fb2022

Commits on Apr 18, 2023

• Added back the nil value for satisfies tag

  Show description for 47d4586
  karikarshivani

  committed
  47d4586

Commits on Apr 19, 2023

• Split logic into two condtions and included the new init test

  Show description for 793ce63
  karikarshivani

  committed
  793ce63

• Updated applicable rules for file integrity inputs

  Show description for 242a016
  karikarshivani

  committed
  242a016

• update path to match check text. Need to add changes mirrored in SV-240445

  Show description for 0550e09
  

  Emily Rodriguez

  committed
  0550e09

• Merge branch 'V3R10' of https://github.com/mitre/redhat-enterprise-linux-7-stig-baseline into V3R10

  

  Emily Rodriguez

  committed
  b302af8

Commits on Apr 20, 2023

• remove ref tag

  Show description for 3113e01
  

  Emily Rodriguez

  committed
  3113e01

• fix quoting in control

  Show description for aab3042
  

  Emily Rodriguez

  committed
  aab3042

Commits on Apr 21, 2023

• Added a condition based on STIG udpate and refined exisiting code

  Show description for 80f1ac7
  karikarshivani

  committed
  80f1ac7

• Updated grep to use the recursive flag

  Show description for d936bbd
  karikarshivani

  committed
  d936bbd

• Updated grep to use the recursive flag

  Show description for 49c0ab0
  karikarshivani

  committed
  49c0ab0

• Used the new grep command with separate flags and no \!s

  Show description for 908ebbf
  karikarshivani

  committed
  908ebbf

Commits on Apr 24, 2023

• Changed value comparison to regex instead of string cmp

  Show description for 4b9642c
  karikarshivani

  committed
  4b9642c

• Added relevant STIG IDs for the grub_uefi_main_cfg

  Show description for cd537cd
  karikarshivani

  committed
  cd537cd

Commits on Apr 25, 2023

• adressed new delta requirement of 7.4 release

  Show description for e0a28d0
  ssayed118

  committed
  e0a28d0

• Removed \n from NIST tag

  Show description for 4541962
  karikarshivani

  committed
  4541962

Commits on Apr 26, 2023

• Corrected SV numbers for inputs

  Show description for 6f5058c
  karikarshivani

  committed
  6f5058c

• Removed an extra condition that was redundant

  Show description for 8e24e48
  karikarshivani

  committed
  8e24e48

• Removed parentheses from the find command to return output

  Show description for c26a6f0
  karikarshivani

  committed
  c26a6f0

• Added verbiage to provide context for MFA package dependencies"

  Show description for f498178
  karikarshivani

  committed
  f498178

Commits on May 1, 2023

• Added 'perm=x' based on V3R10 additions

  Show description for 211f582
  karikarshivani

  committed
  211f582

• Added other audit rule fields as required

  Show description for 68acd98
  karikarshivani

  committed
  68acd98

Commits on May 2, 2023

• audit_rule.key.uniq updated to use 'include' rather than 'cmp'

  Show description for 5fc1272
  ssayed118

  committed
  5fc1272

• add check for configuration value of systcl parameter in the various configuration locations

  Show description for 3fced5b
  

  Emily Rodriguez

  committed
  3fced5b

• Merge branch 'V3R10' of https://github.com/mitre/redhat-enterprise-linux-7-stig-baseline into V3R10

  

  Emily Rodriguez

  committed
  2b9ee1a

Commits on May 3, 2023

• update sysctl controls

  Show description for 5ab1ca0
  

  Emily Rodriguez

  committed
  5ab1ca0

• added 3 of the new controls after referencing rhel 8 profile

  Show description for d3d76ce
  

  Emily Rodriguez

  committed
  d3d76ce

• update to use the emergency account name

  Show description for 96477ed
  

  Emily Rodriguez

  committed
  96477ed

Commits on May 4, 2023

• Used the correct parameters based on the check text

  Show description for dcd1777
  karikarshivani

  committed
  dcd1777

• run cookstyle again, mostly cleaning up white spaces

  Show description for 9e1b802
  

  Emily Rodriguez

  committed
  9e1b802

• Changed inv_mode to inverse_mode

  Show description for d72360f
  karikarshivani

  committed
  d72360f

• Added a test for pam_pkcs11

  Show description for 698cf9e
  karikarshivani

  committed
  698cf9e

• Added input for aide.conf path and used desc

  Show description for 3aa3d56
  karikarshivani

  committed
  3aa3d56

• Used the new aide_conf_path input as a condition and removed installation test

  Show description for fce9f55
  karikarshivani

  committed
  fce9f55

• Refined the aide_conf_path failure output

  Show description for bd20c0c
  karikarshivani

  committed
  bd20c0c

• Replicated the approach for aide conf path check and added it to the README

  Show description for 8cb0617
  karikarshivani

  committed
  8cb0617

Commits on May 5, 2023

• Added usr_authtok as per the guidance

  Show description for 3db33e3
  karikarshivani

  committed
  3db33e3

Commits on May 9, 2023

• Sets (variables) updated to use << rather than +=

  Show description for bc3d0e3
  ssayed118

  committed
  bc3d0e3

• update /sbin/sysctl controls to improve readability

  Show description for ee6db08
  

  Emily Rodriguez

  committed
  ee6db08

• Merge branch 'V3R10' of https://github.com/mitre/redhat-enterprise-linux-7-stig-baseline into V3R10

  

  Emily Rodriguez

  committed
  96edbf4

Commits on May 10, 2023

• Added q to use %q string literal

  Show description for 17191b3
  karikarshivani

  committed
  17191b3

• Removed describe.one to follow the 'and' guidance instead of 'or'

  Show description for f7605ea
  karikarshivani

  committed
  f7605ea

• Renamed input name to match inspec.yml

  Show description for 99161e4
  karikarshivani

  committed
  99161e4

Commits on May 11, 2023

• removed AIDE installation from 'cron' controls

  Show description for fe0365a
  ssayed118

  committed
  fe0365a

• adressed profile error

  Show description for 22129ea
  ssayed118

  committed
  22129ea

• added logic for 255925

  Show description for 6e396f2
  

  Emily Rodriguez

  committed
  6e396f2

• Added InSpec code based on discussions

  Show description for 8d4be55
  karikarshivani

  committed
  8d4be55

• Removed code that wasn't being used

  Show description for 218d0e3
  karikarshivani

  committed
  218d0e3

Commits on May 12, 2023

• update sysctl commands

  Show description for 7718194
  

  Emily Rodriguez

  committed
  7718194

• Added a missing condition for 7.4 release

  Show description for 17d8bc5
  karikarshivani

  committed
  17d8bc5

• change 204630 back to not using explicit subject inside describe.one

  Show description for ea02dd1
  

  Emily Rodriguez

  committed
  ea02dd1

• test with ansible hardening content

  Show description for d289fca
  

  Emily Rodriguez

  committed
  d289fca

• typo fixes

  Show description for d3711f0
  ejaronne

  committed
  d3711f0

• disable failing check rhel_07_010340 for hardening

  Show description for 332eebb
  

  Emily Rodriguez

  committed
  332eebb

• remove unused inputs, return hardening to use mitre fork

  Show description for 13550b2
  

  Emily Rodriguez

  committed
  13550b2

• begin removing the extra inputs for checking input values

  Show description for 99c304f
  

  Emily Rodriguez

  committed
  99c304f

Commits on May 15, 2023

• match names with rhel8

  Show description for c0c030f
  

  Emily Rodriguez

  committed
  c0c030f

Commits on May 16, 2023

• update input names to match rhel8, fix a cmp >= in password min len control

  Show description for f18f46d
  

  Emily Rodriguez

  committed
  f18f46d

Commits on May 18, 2023

• fix difok and a few other input logic

  Show description for fa986a6
  

  Emily Rodriguez

  committed
  fa986a6

Commits on May 19, 2023

• Merge pull request #196 from mitre/removeInputChecking

  Show description for c0774e7
  em-c-rod

  authored
  c0774e7

Commits on May 21, 2023

• rewrite of the control. takes a very long time but that's cause on my spun up rhel7 docker container it ended up processing 15k-ish files and creating 45k-ish tests. printing out a lot of debugging…

  Show description for 910ddaa
  Amndeep7

  committed
  910ddaa

• disabling slow controls for now so as to be able to test. REVERT THIS COMMIT

  Show description for 10d65b1
  Amndeep7

  committed
  10d65b1

• REVERT THIS COMMIT TOO - forgot to apply it to the ec2 one. there will be more false pass/fails cause of the ec2-user stuff but it's whatever

  Show description for 6a3cb9d
  Amndeep7

  committed
  6a3cb9d

• trigger workflows hopefully

  Amndeep7

  committed
  b13f64d

• skip describe if file doesn't exist

  Show description for fc3ae8f
  Amndeep7

  committed
  fc3ae8f

• negate the ifs so correct semantics apply. also swap where the print goes to maybe speed things up

  Show description for a164f9d
  Amndeep7

  committed
  a164f9d

• easier to read output when it's in octal and not decimal

  Show description for 5e9f348
  Amndeep7

  committed
  5e9f348

Commits on May 22, 2023

• removed print statements

  Show description for 03071f0
  Amndeep7

  committed
  03071f0