Merge pull request #12553 from Security-Onion-Solutions/reyesj2-patch-osc

Run scan against default scap security guide so that resulting score is accurate
This commit is contained in:
Jorge Reyes
2024-03-11 07:52:07 -04:00
committed by GitHub

View File

@@ -85,7 +85,7 @@ remove_nullok_from_system_auth_auth:
run_post_scan: run_post_scan:
cmd.run: cmd.run:
- name: 'oscap xccdf eval --profile {{ OSCAP_PROFILE_NAME }} --results {{ OSCAP_OUTPUT_DIR }}/post-oscap-results.xml --report {{ OSCAP_OUTPUT_DIR }}/post-oscap-report.html {{ OSCAP_PROFILE_LOCATION }}' - name: 'oscap xccdf eval --profile {{ OSCAP_PROFILE_NAME }} --results {{ OSCAP_OUTPUT_DIR }}/post-oscap-results.xml --report {{ OSCAP_OUTPUT_DIR }}/post-oscap-report.html /usr/share/xml/scap/ssg/content/ssg-ol9-ds.xml'
- success_retcodes: - success_retcodes:
- 2 - 2