DISA-alignment testing shows a consistent mismatch for audit_rules_sudoers_d, reproduced across oscap, anaconda, and ansible remediation scenarios.
Result: SSG = pass, DISA = fail
DISA rule ID: SV-258218r1210920_rule
Affected: RHEL 9.2, 9.4, 9.6, 9.8, 9.9 — not RHEL 8.10, suggesting either the expected audit rule syntax differs between RHEL 8 and 9 STIG benchmarks, or the underlying audit rule content changed for RHEL 9 in a way that satisfies SSG but not DISA's expected form (e.g. auditctl rule field ordering, key naming, or path form for /etc/sudoers.d).
DISA-alignment testing shows a consistent mismatch for
audit_rules_sudoers_d, reproduced acrossoscap,anaconda, andansibleremediation scenarios.Result: SSG =
pass, DISA =failDISA rule ID:
SV-258218r1210920_ruleAffected: RHEL 9.2, 9.4, 9.6, 9.8, 9.9 — not RHEL 8.10, suggesting either the expected audit rule syntax differs between RHEL 8 and 9 STIG benchmarks, or the underlying audit rule content changed for RHEL 9 in a way that satisfies SSG but not DISA's expected form (e.g. auditctl rule field ordering, key naming, or path form for
/etc/sudoers.d).