List view

Add new rule install_endpoint_security_software

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

New RuleIssues or pull requests related to new Rules.Issues or pull requests related to new Rules.

UbuntuUbuntu product related.Ubuntu product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11970

#11970 In ComplianceAsCode/content;

· by mpurg was closed on May 8, 2024

Add missing rule package_pam_pwquality_installed to Ubuntu 22.04 CIS profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

UbuntuUbuntu product related.Ubuntu product related.

Update ProfileIssues or pull requests related to Profiles updates.Issues or pull requests related to Profiles updates.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11968

#11968 In ComplianceAsCode/content;

· by mpurg was closed on May 8, 2024

Disable check for 'auditd_audispd_configure_sufficiently_large_partition' on Ubuntu 22.04

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

UbuntuUbuntu product related.Ubuntu product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11969

#11969 In ComplianceAsCode/content;

· by mpurg was closed on May 8, 2024

Achieve consistent file and directory permissions for systemd journals

BashBash remediation update.Bash remediation update.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

UbuntuUbuntu product related.Ubuntu product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11974

#11974 In ComplianceAsCode/content;

· by alanmcanonical was closed on May 10, 2024

Initial RHEL 10 e8 Profile

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

RHEL10Red Hat Enterprise Linux 10 product related.Red Hat Enterprise Linux 10 product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11976

#11976 In ComplianceAsCode/content;

· by Mab879 was closed on May 13, 2024

add accounts_password_set_max_life_root to unselect_rules_list

Test SuiteUpdate in Test Suite.Update in Test Suite.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11981

#11981 In ComplianceAsCode/content;

· by vojtapolasek was closed on May 9, 2024

Fix zipl_bootmap_is_up_to_date

productization-issueIssue found in upstream stabilization process.Issue found in upstream stabilization process.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11980

#11980 In ComplianceAsCode/content;

· by jan-cerny was closed on May 9, 2024

Add when conditional to Ansible remediation of sssd_enable_pam_services

AnsibleAnsible remediation update.Ansible remediation update.

bugfixFixes to reported bugs.Fixes to reported bugs.

RHEL7Red Hat Enterprise Linux 7 product related.Red Hat Enterprise Linux 7 product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11982

#11982 In ComplianceAsCode/content;

· by vojtapolasek was closed on May 10, 2024

Fix missing variable for Ubuntu 22.04

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

UbuntuUbuntu product related.Ubuntu product related.

Update ProfileIssues or pull requests related to Profiles updates.Issues or pull requests related to Profiles updates.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11973

#11973 In ComplianceAsCode/content;

· by mpurg was closed on May 8, 2024

Align audit_xattr rules with Ubuntu 22.04 STIG

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

STIGSTIG Benchmark related.STIG Benchmark related.

UbuntuUbuntu product related.Ubuntu product related.

Update RuleIssues or pull requests related to Rules updates.Issues or pull requests related to Rules updates.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11975

#11975 In ComplianceAsCode/content;

· by mpurg was closed on May 10, 2024

Fix rule name in Ubuntu 22.04 STIG profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

UbuntuUbuntu product related.Ubuntu product related.

Update ProfileIssues or pull requests related to Profiles updates.Issues or pull requests related to Profiles updates.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11971

#11971 In ComplianceAsCode/content;

· by mpurg was closed on May 8, 2024

update debian12 anssi bp28 minimal profile

DebianDebian product related.Debian product related.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11592

#11592 In ComplianceAsCode/content;

· by a-skr was closed on May 21, 2024

Defined notes and rules for control BSI APP4.4.A8 - APP4.4.A11

BSIPRs or issues for the BSI profile.PRs or issues for the BSI profile.

do-not-merge/holdUsed by openshift-ci-robot bot.Used by openshift-ci-robot bot.

ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

OpenShiftOpenShift product related.OpenShift product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11559

#11559 In ComplianceAsCode/content;

· by benruland was closed on Jun 4, 2024

OCP4: Add workflow to test ocp content

OpenShiftOpenShift product related.OpenShift product related.

Test SuiteUpdate in Test Suite.Update in Test Suite.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11615

#11615 In ComplianceAsCode/content;

· by Vincent056 was closed on May 15, 2024

Image Pruner Rule has inconsistent ocil text

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

OpenShiftOpenShift product related.OpenShift product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11627

#11627 In ComplianceAsCode/content;

· by prb112 was closed on Jun 4, 2024

Defined notes and rules for control BSI APP.4.4.A5

BSIPRs or issues for the BSI profile.PRs or issues for the BSI profile.

do-not-merge/holdUsed by openshift-ci-robot bot.Used by openshift-ci-robot bot.

ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

OpenShiftOpenShift product related.OpenShift product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11717

#11717 In ComplianceAsCode/content;

· by sluetze was closed on May 29, 2024

Re-enable runtime check on network related sysctls

OpenShiftOpenShift product related.OpenShift product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11722

#11722 In ComplianceAsCode/content;

· by yuumasato was closed on Jul 12, 2024

OCP4: Add option to deploy profile without upstream prefix

OpenShiftOpenShift product related.OpenShift product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11324

#11324 In ComplianceAsCode/content;

· by Vincent056 was closed on Jun 28, 2024

Defined notes and Rules for BSI APP.4.4.A6-7

BSIPRs or issues for the BSI profile.PRs or issues for the BSI profile.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

New RuleIssues or pull requests related to new Rules.Issues or pull requests related to new Rules.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11794

#11794 In ComplianceAsCode/content;

· by sluetze was closed on Jun 10, 2024

OCPBUGS-31510: change the analysis to not include ImageStreamTag

ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

OpenShiftOpenShift product related.OpenShift product related.

STIGSTIG Benchmark related.STIG Benchmark related.

Update RuleIssues or pull requests related to Rules updates.Issues or pull requests related to Rules updates.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11783

#11783 In ComplianceAsCode/content;

· by prb112 was closed on Jun 6, 2024

OCP4: use new assertion formate for OCP CI

OpenShiftOpenShift product related.OpenShift product related.

Test SuiteUpdate in Test Suite.Update in Test Suite.

Status: Merged (completed).

ComplianceAsCode/contentnumber 11790

#11790 In ComplianceAsCode/content;

· by Vincent056 was closed on Apr 30, 2024

Remove Debian 10 Product

HighlightThis PR/Issue should make it to the featured changelog.This PR/Issue should make it to the featured changelog.

product-removalIssues or pull requests that relate to the removal of products.Issues or pull requests that relate to the removal of products.

Status: Merged (completed).

ComplianceAsCode/contentnumber 12205

#12205 In ComplianceAsCode/content;

· by Mab879 was closed on Jul 24, 2024

Bump softprops/action-gh-release from 2.0.7 to 2.0.8

dependenciesPull requests that update a dependency filePull requests that update a dependency file

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Merged (completed).

ComplianceAsCode/contentnumber 12189

#12189 In ComplianceAsCode/content;

· by dependabot was closed on Jul 19, 2024

Move to default crypto policy for RHEL10 for CIS Profiles

CISCIS Benchmark related.CIS Benchmark related.

RHEL10Red Hat Enterprise Linux 10 product related.Red Hat Enterprise Linux 10 product related.

Update ProfileIssues or pull requests related to Profiles updates.Issues or pull requests related to Profiles updates.

Status: Merged (completed).

ComplianceAsCode/contentnumber 12187

#12187 In ComplianceAsCode/content;

· by Mab879 was closed on Jul 19, 2024

Add a minimum cluster stability timeout for OpenShift e2e remediation

OpenShiftOpenShift product related.OpenShift product related.

Status: Merged (completed).

ComplianceAsCode/contentnumber 12184

#12184 In ComplianceAsCode/content;

· by rhmdnd was closed on Jul 19, 2024