Skip to content

Commit a12ddd2

Browse files
authored
Merge pull request #14356 from vojtapolasek/rhel9_stig_drop_rules_02_26
drop controls no longer present in the latest RHEL 9 STIG
2 parents de118d6 + 11aeb8f commit a12ddd2

4 files changed

Lines changed: 1 addition & 20 deletions

File tree

products/rhel9/controls/stig_rhel9.yml

Lines changed: 0 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -2418,14 +2418,6 @@ controls:
24182418
- group_unique_id
24192419
status: automated
24202420

2421-
- id: RHEL-09-411115
2422-
levels:
2423-
- medium
2424-
title: Local RHEL 9 initialization files must not execute world-writable programs.
2425-
rules:
2426-
- accounts_user_dot_no_world_writable_programs
2427-
status: automated
2428-
24292421
- id: RHEL-09-412035
24302422
levels:
24312423
- medium
@@ -2497,14 +2489,6 @@ controls:
24972489
- accounts_umask_etc_profile
24982490
status: automated
24992491

2500-
- id: RHEL-09-412075
2501-
levels:
2502-
- low
2503-
title: RHEL 9 must display the date and time of the last successful account logon upon logon.
2504-
rules:
2505-
- display_login_attempts
2506-
status: automated
2507-
25082492
- id: RHEL-09-412080
25092493
levels:
25102494
- medium

products/rhel9/profiles/default.profile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -590,3 +590,4 @@ selections:
590590
- audit_rules_var_spool_cron
591591
- audit_rules_login_events_tallylog
592592
- configure_ssh_crypto_policy
593+
- accounts_user_dot_no_world_writable_programs

tests/data/profile_stability/rhel9/stig.profile

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,6 @@ accounts_umask_etc_csh_cshrc
4242
accounts_umask_etc_login_defs
4343
accounts_umask_etc_profile
4444
accounts_umask_interactive_users
45-
accounts_user_dot_no_world_writable_programs
4645
accounts_user_home_paths_only
4746
accounts_user_interactive_home_directory_defined
4847
accounts_user_interactive_home_directory_exists
@@ -185,7 +184,6 @@ disable_ctrlaltdel_reboot
185184
disable_host_auth
186185
disable_users_coredumps
187186
disallow_bypass_password_sudo
188-
display_login_attempts
189187
enable_authselect
190188
enable_dracut_fips_module
191189
enable_fips_mode

tests/data/profile_stability/rhel9/stig_gui.profile

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,6 @@ accounts_umask_etc_csh_cshrc
4242
accounts_umask_etc_login_defs
4343
accounts_umask_etc_profile
4444
accounts_umask_interactive_users
45-
accounts_user_dot_no_world_writable_programs
4645
accounts_user_home_paths_only
4746
accounts_user_interactive_home_directory_defined
4847
accounts_user_interactive_home_directory_exists
@@ -185,7 +184,6 @@ disable_ctrlaltdel_reboot
185184
disable_host_auth
186185
disable_users_coredumps
187186
disallow_bypass_password_sudo
188-
display_login_attempts
189187
enable_authselect
190188
enable_dracut_fips_module
191189
enable_fips_mode

0 commit comments

Comments
 (0)