From 8f8c250ed34fc781026b135a4d69015ac277b1f3 Mon Sep 17 00:00:00 2001
From: reyesj2 <94730068+reyesj2@users.noreply.github.com>
Date: Fri, 19 Jan 2024 16:04:21 -0500
Subject: [PATCH] Disable stigs setting/verifing umask is set to 077. Known
 issue with running SOUP

Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
---
 salt/stig/files/sos-oscap.xml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/salt/stig/files/sos-oscap.xml b/salt/stig/files/sos-oscap.xml
index bc7289e9b..3f78af8c0 100644
--- a/salt/stig/files/sos-oscap.xml
+++ b/salt/stig/files/sos-oscap.xml
@@ -649,11 +649,11 @@ the release. Additionally, the original security profile has been modified by Se
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_interval" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_unlock_time" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_tmout" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_bashrc" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_csh_cshrc" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_login_defs" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_profile" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_interactive_users" selected="true" />
+        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_bashrc" selected="false" />
+        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_csh_cshrc" selected="false" />
+        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_login_defs" selected="false" />
+        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_profile" selected="false" />
+        <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_interactive_users" selected="false" />
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_dot_no_world_writable_programs" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_home_paths_only" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_interactive_home_directory_defined" selected="true" />
@@ -1109,7 +1109,7 @@ the release. Additionally, the original security profile has been modified by Se
         <ns5:select idref="xccdf_org.ssgproject.content_group_configure_logwatch_on_logserver" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_group_configure_printing" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_group_configuring_samba" selected="true" />
-        <ns5:select idref="xccdf_org.ssgproject.content_group_daemon_umask" selected="true" />
+        <ns5:select idref="xccdf_org.ssgproject.content_group_daemon_umask" selected="false" />
         <ns5:select idref="xccdf_org.ssgproject.content_group_deprecated" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_group_dhcp" selected="true" />
         <ns5:select idref="xccdf_org.ssgproject.content_group_dhcp_client_configuration" selected="true" />