Skip to content

drop controls no longer present in the latest RHEL 9 STIG#14356

Open
vojtapolasek wants to merge 3 commits intoComplianceAsCode:masterfrom
vojtapolasek:rhel9_stig_drop_rules_02_26
Open

drop controls no longer present in the latest RHEL 9 STIG#14356
vojtapolasek wants to merge 3 commits intoComplianceAsCode:masterfrom
vojtapolasek:rhel9_stig_drop_rules_02_26

Conversation

@vojtapolasek
Copy link
Collaborator

@vojtapolasek vojtapolasek commented Feb 3, 2026

Description:

  • see commit messages

Rationale:

  • align the content with the latest STIG

Review Hints:

Crosscheck changes with the latest STIG at https://stigaview.com/products/rhel9/v2r7

@vojtapolasek vojtapolasek added this to the 0.1.80 milestone Feb 3, 2026
@vojtapolasek vojtapolasek added RHEL9 Red Hat Enterprise Linux 9 product related. Update Profile Issues or pull requests related to Profiles updates. STIG STIG Benchmark related. labels Feb 3, 2026
@Mab879 Mab879 self-assigned this Feb 3, 2026
Mab879
Mab879 requested changes Feb 3, 2026
View reviewed changes
Copy link
Member

@Mab879 Mab879 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like one rule needs to be added to the default profile xccdf_org.ssgproject.content_rule_accounts_user_dot_no_world_writable_programs is missing in new data stream.

@github-actions
Copy link

github-actions bot commented Feb 3, 2026 •
edited
Loading

ATEX Test Results

Test artifacts have been submitted to Testing Farm.

Results: [View Test Results](No HTML link found)
Workflow Run: View Workflow Details

This comment was automatically generated by the ATEX workflow.

@vojtapolasek
Copy link
Collaborator Author

vojtapolasek commented Feb 4, 2026

@Mab879 done, thanks.

@openshift-ci
Copy link

openshift-ci bot commented Feb 4, 2026

@vojtapolasek: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-aws-openshift-node-compliance 35e9eeb link true /test e2e-aws-openshift-node-compliance

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@vojtapolasek vojtapolasek force-pushed the rhel9_stig_drop_rules_02_26 branch from 35e9eeb to 64a0d2e Compare February 5, 2026 15:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Mab879 Mab879 Mab879 requested changes

@matusmarhefka matusmarhefka Awaiting requested review from matusmarhefka matusmarhefka is a code owner

@jan-cerny jan-cerny Awaiting requested review from jan-cerny jan-cerny is a code owner

Requested changes must be addressed to merge this pull request.

Assignees

@Mab879 Mab879

Labels

RHEL9 Red Hat Enterprise Linux 9 product related. STIG STIG Benchmark related. Update Profile Issues or pull requests related to Profiles updates.

Projects

None yet

Milestone

0.1.80

Development

Successfully merging this pull request may close these issues.

2 participants

@vojtapolasek @Mab879