CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12220 from Security-Onion-Solutions/reyesj2-patch-sl

Browse Source 
Disable stigs setting/verifying umask is set to 077. Known issue with …
This commit is contained in:
Jorge Reyes
2024-01-19 16:06:10 -05:00
committed by GitHub
parent 6db32885eb 8f8c250ed3
commit c2b44985c7
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
salt/stig/files/sos-oscap.xml
View File

@@ -649,11 +649,11 @@ the release. Additionally, the original security profile has been modified by Se
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_interval" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faillock_unlock_time" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_tmout" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_bashrc" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_csh_cshrc" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_login_defs" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_profile" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_interactive_users" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_bashrc" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_csh_cshrc" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_login_defs" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_etc_profile" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_umask_interactive_users" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_dot_no_world_writable_programs" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_home_paths_only" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_rule_accounts_user_interactive_home_directory_defined" selected="true" />
@@ -1109,7 +1109,7 @@ the release. Additionally, the original security profile has been modified by Se
<ns5:select idref="xccdf_org.ssgproject.content_group_configure_logwatch_on_logserver" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_configure_printing" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_configuring_samba" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_daemon_umask" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_daemon_umask" selected="false" />
<ns5:select idref="xccdf_org.ssgproject.content_group_deprecated" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_dhcp" selected="true" />
<ns5:select idref="xccdf_org.ssgproject.content_group_dhcp_client_configuration" selected="true" />