We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Check for rule xccdf_org.ssgproject.content_rule_audit_rules_mac_modification always fails on Ubuntu.
xccdf_org.ssgproject.content_rule_audit_rules_mac_modification
master branch
Ubuntu 22.04 LTS
-w /etc/apparmor/ -p wa -k MAC-policy -w /etc/apparmor.d/ -p wa -k MAC-policy
augenrules --load
oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_cis_level2_server --rule xccdf_org.ssgproject.content_rule_audit_rules_mac_modification ssg-ubuntu2204-ds.xml
Title Record Events that Modify the System's Mandatory Access Controls Rule xccdf_org.ssgproject.content_rule_audit_rules_mac_modification Result fail
Title Record Events that Modify the System's Mandatory Access Controls Rule xccdf_org.ssgproject.content_rule_audit_rules_mac_modification Result pass
The check on the audit rule -w /etc/selinux/ -p wa -k MAC-policy on Ubuntu is wrong and should check:
-w /etc/selinux/ -p wa -k MAC-policy
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Description of problem:
Check for rule
xccdf_org.ssgproject.content_rule_audit_rules_mac_modification
always fails on Ubuntu.SCAP Security Guide Version:
master branch
Operating System Version:
Ubuntu 22.04 LTS
Steps to Reproduce:
augenrules --load
oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_cis_level2_server --rule xccdf_org.ssgproject.content_rule_audit_rules_mac_modification ssg-ubuntu2204-ds.xml
Actual Results:
Expected Results:
Additional Information/Debugging Steps:
The check on the audit rule
-w /etc/selinux/ -p wa -k MAC-policy
on Ubuntu is wrong and should check:The text was updated successfully, but these errors were encountered: