|
 |
9be3b2 |
From 8fa9ca61649a36dd1f3d5e5c72c0162a4dbfe694 Mon Sep 17 00:00:00 2001
|
|
|
9be3b2 |
From: Gabriel Becker <ggasparb@redhat.com>
|
|
|
9be3b2 |
Date: Tue, 10 Aug 2021 09:45:56 +0200
|
|
|
9be3b2 |
Subject: [PATCH] Remove RHEL-08-040162 from STIG profile.
|
|
|
9be3b2 |
|
|
|
9be3b2 |
This item has been removed in version RHEL8 DISA STIG V1R3.
|
|
|
9be3b2 |
---
|
|
|
9be3b2 |
.../services/ssh/ssh_client/ssh_client_rekey_limit/rule.yml | 1 -
|
|
|
9be3b2 |
products/rhel8/profiles/stig.profile | 3 ---
|
|
|
9be3b2 |
tests/data/profile_stability/rhel8/stig.profile | 1 -
|
|
|
9be3b2 |
tests/data/profile_stability/rhel8/stig_gui.profile | 1 -
|
|
|
9be3b2 |
4 files changed, 6 deletions(-)
|
|
|
9be3b2 |
|
|
|
9be3b2 |
diff --git a/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/rule.yml b/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/rule.yml
|
|
|
9be3b2 |
index 1852313216a..f43f92c2f15 100644
|
|
|
9be3b2 |
--- a/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/rule.yml
|
|
|
9be3b2 |
+++ b/linux_os/guide/services/ssh/ssh_client/ssh_client_rekey_limit/rule.yml
|
|
|
9be3b2 |
@@ -32,7 +32,6 @@ references:
|
|
|
9be3b2 |
disa: CCI-000068
|
|
|
9be3b2 |
ospp: FCS_SSHS_EXT.1
|
|
|
9be3b2 |
srg: SRG-OS-000423-GPOS-00187,SRG-OS-000033-GPOS-00014
|
|
|
9be3b2 |
- stigid@rhel8: RHEL-08-040162
|
|
|
9be3b2 |
|
|
|
9be3b2 |
ocil_clause: 'it is commented out or is not set'
|
|
|
9be3b2 |
|
|
|
9be3b2 |
diff --git a/products/rhel8/profiles/stig.profile b/products/rhel8/profiles/stig.profile
|
|
|
9be3b2 |
index a358f61dba5..9d4d1965141 100644
|
|
|
9be3b2 |
--- a/products/rhel8/profiles/stig.profile
|
|
|
9be3b2 |
+++ b/products/rhel8/profiles/stig.profile
|
|
|
9be3b2 |
@@ -1071,9 +1071,6 @@ selections:
|
|
|
9be3b2 |
# RHEL-08-040161
|
|
|
9be3b2 |
- sshd_rekey_limit
|
|
|
9be3b2 |
|
|
|
9be3b2 |
- # RHEL-08-040162
|
|
|
9be3b2 |
- - ssh_client_rekey_limit
|
|
|
9be3b2 |
-
|
|
|
9be3b2 |
# RHEL-08-040170
|
|
|
9be3b2 |
- disable_ctrlaltdel_reboot
|
|
|
9be3b2 |
|
|
|
9be3b2 |
diff --git a/tests/data/profile_stability/rhel8/stig.profile b/tests/data/profile_stability/rhel8/stig.profile
|
|
|
9be3b2 |
index 7d54a7505fb..fca5842cf22 100644
|
|
|
9be3b2 |
--- a/tests/data/profile_stability/rhel8/stig.profile
|
|
|
9be3b2 |
+++ b/tests/data/profile_stability/rhel8/stig.profile
|
|
|
9be3b2 |
@@ -323,7 +323,6 @@ selections:
|
|
|
9be3b2 |
- service_usbguard_enabled
|
|
|
9be3b2 |
- set_password_hashing_algorithm_logindefs
|
|
|
9be3b2 |
- set_password_hashing_algorithm_systemauth
|
|
|
9be3b2 |
-- ssh_client_rekey_limit
|
|
|
9be3b2 |
- sshd_disable_compression
|
|
|
9be3b2 |
- sshd_disable_empty_passwords
|
|
|
9be3b2 |
- sshd_disable_gssapi_auth
|
|
|
9be3b2 |
diff --git a/tests/data/profile_stability/rhel8/stig_gui.profile b/tests/data/profile_stability/rhel8/stig_gui.profile
|
|
|
9be3b2 |
index 97291230e7c..35fa9ddea2b 100644
|
|
|
9be3b2 |
--- a/tests/data/profile_stability/rhel8/stig_gui.profile
|
|
|
9be3b2 |
+++ b/tests/data/profile_stability/rhel8/stig_gui.profile
|
|
|
9be3b2 |
@@ -334,7 +334,6 @@ selections:
|
|
|
9be3b2 |
- service_usbguard_enabled
|
|
|
9be3b2 |
- set_password_hashing_algorithm_logindefs
|
|
|
9be3b2 |
- set_password_hashing_algorithm_systemauth
|
|
|
9be3b2 |
-- ssh_client_rekey_limit
|
|
|
9be3b2 |
- sshd_disable_compression
|
|
|
9be3b2 |
- sshd_disable_empty_passwords
|
|
|
9be3b2 |
- sshd_disable_gssapi_auth
|