Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Rule accounts_password_pam_pwquality_retry is misaligned with DISA STIG RHEL 9 v2r3 SCAP content #13011

Open
vojtapolasek opened this issue Feb 10, 2025 · 0 comments
Open

Rule accounts_password_pam_pwquality_retry is misaligned with DISA STIG RHEL 9 v2r3 SCAP content #13011

vojtapolasek opened this issue Feb 10, 2025 · 0 comments
Labels
blocked Issue that can't be fixed in content. productization-issue Issue found in upstream stabilization process. RHEL9 Red Hat Enterprise Linux 9 product related. STIG STIG Benchmark related.

Comments

@vojtapolasek
Copy link
Collaborator

Description of problem:

The content is misaligned with DISA STIG for RHEL 9 v2r3.
The STIG ID from the XCCDF guide (rendered version) is here:
https://stigaview.com/products/rhel9/v2r3/RHEL-09-611010/

As you can see, the description talks about a value in /etc/security/pwquality.conf file.
However, the up to date SCAP file still checks for value in /etc/pam.d/system-auth.
The CaC/content project follows the written guide.
I believe the STIG SCAP file should be updated.

SCAP Security Guide Version:

master as of 2025-02-10

External Content's Version:

V2r3
@vojtapolasek vojtapolasek added blocked Issue that can't be fixed in content. RHEL9 Red Hat Enterprise Linux 9 product related. STIG STIG Benchmark related. productization-issue Issue found in upstream stabilization process. labels Feb 10, 2025
vojtapolasek added a commit to vojtapolasek/contest that referenced this issue Feb 10, 2025
@vojtapolasek
add waiver for disa misalignment with accounts_password_pam_pwquality…
56f0b27 
…_retry

more details at ComplianceAsCode/content#13011
@vojtapolasek vojtapolasek mentioned this issue Feb 10, 2025
Merged
comps pushed a commit to RHSecurityCompliance/contest that referenced this issue Feb 10, 2025
@vojtapolasek @comps
add waiver for disa misalignment with accounts_password_pam_pwquality…
bd5ade4 
…_retry

more details at ComplianceAsCode/content#13011
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
blocked Issue that can't be fixed in content. productization-issue Issue found in upstream stabilization process. RHEL9 Red Hat Enterprise Linux 9 product related. STIG STIG Benchmark related.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@vojtapolasek