CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-24 01:43:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

Disable stigs setting/verifing umask is set to 077. Known issue with running SOUP

Browse Source 
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
This commit is contained in:
reyesj2
2024-01-19 16:04:21 -05:00
parent 2b6927da82
commit 8f8c250ed3
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
salt/stig/files/sos-oscap.xml
View File

@@ -649,11 +649,11 @@ the release. Additionally, the original security profile has been modified by Se
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_interval" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_unlock_time" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_tmout" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_bashrc" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_csh_cshrc" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_login_defs" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_profile" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_interactive_users" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_bashrc" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_csh_cshrc" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_login_defs" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_profile" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_interactive_users" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_dot_no_world_writable_programs" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_home_paths_only" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_interactive_home_directory_defined" selected="true" />
@@ -1109,7 +1109,7 @@ the release. Additionally, the original security profile has been modified by Se
<ns5:select idref="xccdf_org.ssgproject.content_group_configure_logwatch_on_logserver" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_configure_printing" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_configuring_samba" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_daemon_umask" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_daemon_umask" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_group_deprecated" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_dhcp" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_dhcp_client_configuration" selected="true" />