8000 Add Rule,Remediation and Test for SLES-15-030770 by yarunachalam · Pull Request #6933 · ComplianceAsCode/content · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Add Rule,Remediation and Test for SLES-15-030770 #6933

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 4 commits into from
May 12, 2021
Merged

Add Rule,Remediation and Test for SLES-15-030770 #6933

merged 4 commits into from
May 12, 2021

Conversation

yarunachalam
Copy link
Contributor

Description:

  • Add Rule,Remediation and Test for SLES-15-030770

Rationale:

  • Add SLE15 rule to 'Record Attempts to Alter Process and Session Initiation Information wtmp'

@openshift-ci-robot openshift-ci-robot added the needs-ok-to-test Used by openshift-ci bot. label Apr 30, 2021
@openshift-ci-robot
Copy link
Collaborator

Hi @yarunachalam. Thanks for your PR.

I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@openscap-ci
Copy link
Collaborator
openscap-ci commented Apr 30, 2021 •
edited
Loading

Changes identified:
Rules:
 audit_rules_session_events_wtmp
Profiles:
 stig on sle15

Show details

Rule audit_rules_session_events_wtmp:
 Bash remediation is newly added.
 Ansible remediation newly added.
Profile stig on sle15:
 Rule audit_rules_session_events_wtmp added to stig profile.

Recommended tests to execute:
 build_product sle15
 tests/test_suite.py rule --libvirt qemu:///system test-suite-vm --remediate-using ansible --datastream build/ssg-sle15-ds.xml audit_rules_session_events_wtmp
 tests/test_suite.py rule --libvirt qemu:///system test-suite-vm --remediate-using bash --datastream build/ssg-sle15-ds.xml audit_rules_session_events_wtmp
 tests/test_suite.py profile --libvirt qemu:///system test-suite-vm --datastream build/ssg-sle15-ds.xml stig

@vojtapolasek
Copy link
Collaborator

/ok-to-test

@openshift-ci-robot openshift-ci-robot added ok-to-test Used by openshift-ci bot. and removed needs-ok-to-test Used by openshift-ci bot. labels May 5, 2021
vojtapolasek
vojtapolasek requested changes May 5, 2021
View reviewed changes
Copy link
Collaborator
@vojtapolasek vojtapolasek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for this rule. I have just a few minor remarks, see comments.

@vojtapolasek vojtapolasek added this to the 0.1.56 milestone May 6, 2021
@vojtapolasek vojtapolasek self-assigned this May 6, 2021
yarunachalam and others added 3 commits May 10, 2021 10:31
@yarunachalam @vojtapolasek
Update linux_os/guide/system/auditing/auditd_configure_rules/audit_ru…
f810b79 
…les_session_events_wtmp/rule.yml

Co-authored-by: vojtapolasek <krecoun@gmail.com>
@yarunachalam
Fixed Review comments
625f505 
- Added Blank line before template
- updated CCE id for uniqueness
@yarunachalam
Remove unwanted space
6506be8
@vojtapolasek vojtapolasek modified the milestones: 0.1.56, 0.1.57 May 11, 2021
@vojtapolasek vojtapolasek merged commit 2f0574f into ComplianceAsCode:master May 12, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@vojtapolasek vojtapolasek vojtapolasek approved these changes

Assignees

@vojtapolasek vojtapolasek

Labels
ok-to-test Used by openshift-ci bot.
Projects
None yet
Milestone
0.1.57
Development

Successfully merging this pull request may close these issues.
4 participants
@yarunachalam @openshift-ci-robot @openscap-ci @vojtapolasek
0