Merge pull request #9321 from vojtapolasek/fix_rhel8_iboot

change rules protecting boot in RHEL8 OSPP
ComplianceAsCode · Aug 10, 2022 · f9d0306 · f9d0306
2 parents ed3fa75 + b36ecf8
commit f9d0306
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 3 deletions.
diff --git a/linux_os/guide/system/bootloader-grub2/grub2_disable_recovery/rule.yml b/linux_os/guide/system/bootloader-grub2/grub2_disable_recovery/rule.yml
@@ -17,6 +17,7 @@ rationale: |-
 severity: medium
 
 identifiers:
+    cce@rhel8: CCE-86006-4
     cce@rhel9: CCE-85986-8
 
 references:

diff --git a/products/rhel8/profiles/ospp.profile b/products/rhel8/profiles/ospp.profile
@@ -304,7 +304,7 @@ selections:
     ## Disable Unauthenticated Login (such as Guest Accounts)
     ## FIA_UAU.1
     - require_singleuser_auth
-    - grub2_disable_interactive_boot
+    - grub2_disable_recovery
     - grub2_uefi_password
     - no_empty_passwords
 

diff --git a/shared/references/cce-redhat-avail.txt b/shared/references/cce-redhat-avail.txt
@@ -1,4 +1,3 @@
-CCE-86006-4
 CCE-86007-2
 CCE-86008-0
 CCE-86009-8

diff --git a/tests/data/profile_stability/rhel8/ospp.profile b/tests/data/profile_stability/rhel8/ospp.profile
@@ -89,7 +89,7 @@ selections:
 - ensure_redhat_gpgkey_installed
 - grub2_audit_argument
 - grub2_audit_backlog_limit_argument
-- grub2_disable_interactive_boot
+- grub2_disable_recovery
 - grub2_kernel_trust_cpu_rng
 - grub2_page_poison_argument
 - grub2_pti_argument