CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

disable rpm verify hash, salt packages are modified before install for salt bootstrap process

Browse Source
This commit is contained in:
reyesj2
2025-08-14 15:02:59 -05:00
parent 42874fb0d0
commit 50b34a116a
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
salt/stig/files/sos-oscap.xml
View File

@@ -886,7 +886,7 @@ DISA STIG for Oracle Linux 9 V1R1.</xccdf-1.2:description>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_pam_unix_rounds_password_auth" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_pam_unix_rounds_password_auth" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_pam_unix_rounds_system_auth" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_pam_unix_rounds_system_auth" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_set_max_life_existing" selected="false"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_set_max_life_existing" selected="false"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_set_min_life_existing" selected="false"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_set_min_life_existing" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_audit" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_audit" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_deny" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_deny" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_deny_root" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_deny_root" selected="true"/>
@@ -1195,7 +1195,7 @@ DISA STIG for Oracle Linux 9 V1R1.</xccdf-1.2:description>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_crypto-policies_installed" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_crypto-policies_installed" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_fapolicyd_installed" selected="false"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_fapolicyd_installed" selected="false"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_firewalld_installed" selected="false"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_firewalld_installed" selected="false"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_gnutls-utils_installed" selected="false"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_gnutls-utils_installed" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_gssproxy_removed" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_gssproxy_removed" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_iprutils_removed" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_iprutils_removed" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_libreswan_installed" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_libreswan_installed" selected="true"/>
@@ -1473,7 +1473,7 @@ standard DISA STIG for Oracle Linux 9 profile.</xccdf-1.2:description>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_pam_unix_rounds_password_auth" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_pam_unix_rounds_password_auth" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_pam_unix_rounds_system_auth" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_pam_unix_rounds_system_auth" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_set_max_life_existing" selected="false"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_set_max_life_existing" selected="false"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_set_min_life_existing" selected="false"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_password_set_min_life_existing" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_audit" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_audit" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_deny" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_deny" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_deny_root" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_deny_root" selected="true"/>
@@ -1782,7 +1782,7 @@ standard DISA STIG for Oracle Linux 9 profile.</xccdf-1.2:description>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_crypto-policies_installed" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_crypto-policies_installed" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_fapolicyd_installed" selected="false"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_fapolicyd_installed" selected="false"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_firewalld_installed" selected="false"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_firewalld_installed" selected="false"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_gnutls-utils_installed" selected="false"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_gnutls-utils_installed" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_gssproxy_removed" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_gssproxy_removed" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_iprutils_removed" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_iprutils_removed" selected="true"/>
<xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_libreswan_installed" selected="true"/> <xccdf-1.2:select idref="xccdf_org.ssgproject.content_rule_package_libreswan_installed" selected="true"/>