Skip to content

Commit

Permalink
Merge pull request ComplianceAsCode#11362 from Mab879/fix_11359_11360
Browse files Browse the repository at this point in the history
Enable Rules For OSBuild
  • Loading branch information
evgenyz authored Dec 13, 2023
2 parents 4db8089 + 1dd5fd4 commit 550d2a5
Show file tree
Hide file tree
Showing 6 changed files with 4 additions and 10 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -36,4 +36,4 @@ ocil: |-
The output should return the following uncommented:
<pre>session required pam_namespace.so</pre>
platform: package[pam] and not osbuild
platform: package[pam]
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
#!/bin/bash
# platform = multi_platform_all

# shellcheck disable=SC2174
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,15 +9,13 @@ description: |-
Then, add the following entry to <tt>/etc/security/namespace.conf</tt>:
<pre>/tmp /tmp/tmp-inst/ level root,adm</pre>
rationale: |-
rationale: |-
Polyinstantiation of temporary directories is a proactive security measure
which reduces chances of attacks that are made possible by /tmp
directories being world-writable.
severity: low

platform: not osbuild

identifiers:
cce@rhel7: CCE-83731-0
cce@rhel8: CCE-83732-8
Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
#!/bin/bash
# platform = multi_platform_all

# shellcheck disable=SC2174
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,15 +9,13 @@ description: |-
Then, add the following entry to <tt>/etc/security/namespace.conf</tt>:
<pre>/var/tmp /var/tmp/tmp-inst/ level root,adm</pre>
rationale: |-
rationale: |-
Polyinstantiation of temporary directories is a proactive security measure
which reduces chances of attacks that are made possible by /var/tmp
directories being world-writable.
severity: low

platform: not osbuild

identifiers:
cce@rhel7: CCE-83777-3
cce@rhel8: CCE-83778-1
Expand Down
2 changes: 1 addition & 1 deletion linux_os/guide/system/selinux/selinux-booleans/group.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ documentation_complete: true

title: 'SELinux - Booleans'

platform: not osbuild and selinux
platform: selinux

description: |-
Enable or Disable runtime customization of SELinux system policies
Expand Down

0 comments on commit 550d2a5

Please sign in to comment.