use better rule for RHEL-09-232240

vojtapolasek · vojtapolasek · commit b67720a22c0c · 2026-02-10T17:56:04.000+01:00
diff --git a/linux_os/guide/system/permissions/files/dir_perms_world_writable_system_owned/rule.yml b/linux_os/guide/system/permissions/files/dir_perms_world_writable_system_owned/rule.yml
@@ -28,6 +28,9 @@ references:
     stigid@ol7: OL07-00-021031
     stigid@ol8: OL08-00-010700
 
+identifiers:
+    cce@rhel9: CCE-86469-4
+
 ocil_clause: 'there is output'
 
 ocil: |-
diff --git a/products/rhel9/controls/stig_rhel9.yml b/products/rhel9/controls/stig_rhel9.yml
@@ -1303,7 +1303,7 @@ controls:
       title: All RHEL 9 world-writable directories must be owned by root, sys, bin, or an application
           user.
       rules:
-          - dir_perms_world_writable_root_owned
+          - dir_perms_world_writable_system_owned
       status: automated
 
     - id: RHEL-09-232245
diff --git a/shared/references/cce-redhat-avail.txt b/shared/references/cce-redhat-avail.txt
@@ -3,7 +3,6 @@ CCE-86461-1
 CCE-86465-2
 CCE-86466-0
 CCE-86468-6
-CCE-86469-4
 CCE-86482-7
 CCE-86483-5
 CCE-86484-3
diff --git a/tests/data/profile_stability/rhel9/stig.profile b/tests/data/profile_stability/rhel9/stig.profile
@@ -173,8 +173,8 @@ dconf_gnome_session_idle_user_locks
 dir_group_ownership_library_dirs
 dir_ownership_library_dirs
 dir_permissions_library_dirs
-dir_perms_world_writable_root_owned
 dir_perms_world_writable_sticky_bits
+dir_perms_world_writable_system_owned
 directory_group_ownership_var_log_audit
 directory_groupowner_sshd_config_d
 directory_owner_sshd_config_d
diff --git a/tests/data/profile_stability/rhel9/stig_gui.profile b/tests/data/profile_stability/rhel9/stig_gui.profile
@@ -173,8 +173,8 @@ dconf_gnome_session_idle_user_locks
 dir_group_ownership_library_dirs
 dir_ownership_library_dirs
 dir_permissions_library_dirs
-dir_perms_world_writable_root_owned
 dir_perms_world_writable_sticky_bits
+dir_perms_world_writable_system_owned
 directory_group_ownership_var_log_audit
 directory_groupowner_sshd_config_d
 directory_owner_sshd_config_d
