Skip to content

Conversation

@Mab879
Copy link
Member

@Mab879 Mab879 commented Oct 30, 2025

Description:

Add rules to check sshd drop in permissions to RHEL 10 CIS 5.1.1

Rationale:

Fixes: OPENSCAP-6087

@Mab879 Mab879 added this to the 0.1.79 milestone Oct 30, 2025
@Mab879 Mab879 added CIS CIS Benchmark related. RHEL10 Red Hat Enterprise Linux 10 product related. Update Profile Issues or pull requests related to Profiles updates. labels Oct 30, 2025
@vojtapolasek vojtapolasek self-assigned this Oct 30, 2025
@vojtapolasek
Copy link
Collaborator

How about following rules? I think they are in scope as well.

  • directory_groupowner_sshd_config_d
  • directory_owner_sshd_config_d
  • file_groupowner_sshd_drop_in_config
  • file_owner_sshd_drop_in_config

@Mab879 Mab879 force-pushed the fix_OPENSCAP-6087 branch from f0c0f93 to 2748df1 Compare October 30, 2025 16:51
@Mab879 Mab879 force-pushed the fix_OPENSCAP-6087 branch from 2748df1 to 12fdee1 Compare October 30, 2025 16:52
@openshift-ci
Copy link

openshift-ci bot commented Oct 30, 2025

@Mab879: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-aws-openshift-node-compliance 12fdee1 link true /test e2e-aws-openshift-node-compliance

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Copy link
Collaborator

@vojtapolasek vojtapolasek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, thank you.

@vojtapolasek vojtapolasek merged commit ffbe113 into ComplianceAsCode:master Oct 31, 2025
139 of 140 checks passed
@Mab879 Mab879 deleted the fix_OPENSCAP-6087 branch October 31, 2025 11:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CIS CIS Benchmark related. RHEL10 Red Hat Enterprise Linux 10 product related. Update Profile Issues or pull requests related to Profiles updates.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants