Sync rules for RHEL 9 STIG #9788
Conversation
Mab879
added
RHEL9
|
Start a new ephemeral environment with changes proposed in this pull request: Fedora Environment Oracle Linux 8 Environment |
openshift-ci
bot
added
the
do-not-merge/work-in-progress
|
Skipping CI for Draft Pull Request. |
Mab879
force-pushed
the
sync_rules_to_rhel_9_stig
branch
2 times, most recently
from
5046c2f to
64f5123
Compare
|
It's looking like some of my changes have bugged out CTF. I assume that is due to my whitespace-only changes. |
openshift-ci
bot
removed
the
do-not-merge/work-in-progress
|
/retest |
This commit cleans up white errors around the project.
Mab879
force-pushed
the
sync_rules_to_rhel_9_stig
branch
from
7237679 to
50bf3bc
Compare
|
@Mab879: The following test failed, say
Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
|
Code Climate has analyzed commit 78a01cc and detected 0 issues on this pull request. The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 48.6% (0.0% change). View more on Code Climate. |
|
The CTF issues should be fixed by: ComplianceAsCode/content-test-filtering#37 |
|
CTF fix has been merged. Re-running all Automatus related checks |
|
Merging, as it is not the final RHEL9 STIG related content, and the PR touches the non-functional metadata files only. |
Description:
This pull request brings in the latest RHEL 9 STIG process changes.
Rationale:
Sync the latest RHEL 9 STIG to the repo.
Review Hints:
The output (which is attached) from the
utils/srg_diff.pyscript will not be perfect. The rules that are missing (on both sides) are by design. We will have minor differences due to the need for rules likedconf_db_up_to_datefor technical reasons. Some rules are combined in the STIG but are separate on our side. This is true in the audit and cron permission rules. Most of the rules under "Missing in Target" need to remove in later revisions when working with the compliance body.srg_diff.html.txt