Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change V-73217 to require manual review #37

Merged
merged 1 commit into from
Mar 15, 2021

Conversation

ejaronne
Copy link
Collaborator

@ejaronne ejaronne commented Mar 2, 2021

The STIG author's intent is to confirm whether the administrative accounts are not the same as the individual's everyday non-privileged account. The individual's everyday non-privileged account may not necessarily exist on the server or under the users group. Hence, it is difficult to automate concisely. Currently the describe block only confirms whether the accounts/groups in the local administrators group match the supplied inputs array. It does not address the STIG author's requirements. Hence, the describe block should be converted to a skip, requiring manual review, similar to method used for V-73225.

describe "A manual review is required to verify that each user with administrative privileges has a separate account for user duties and one for privileged duties." do
skip "A manual review is required to verify that each user with administrative privileges has a separate account for user duties and one for privileged duties."
end

The STIG author's intent is to confirm whether the administrative accounts are not the same as the individual's everyday non-privileged account. The individual's everyday non-privileged account may not necessarily exist on the server or under the users group. Hence, it is difficult to automate concisely. Currently the describe block only confirms whether the accounts/groups in the local administrators group match the supplied inputs array. It does not address the STIG author's requirements. Hence, the describe block should be converted to a skip, requiring manual review, similar to method used for V-73225.

  describe "A manual review is required to verify that each user with administrative privileges has a separate account for user duties and one for privileged duties." do
    skip "A manual review is required to verify that each user with administrative privileges has a separate account for user duties and one for privileged duties."
  end
@aaronlippold
Copy link
Member

Please open an issue so we can track the need to create a better approach to this

@aaronlippold aaronlippold merged commit f5af19e into master Mar 15, 2021
@ejaronne
Copy link
Collaborator Author

#38

@karikarshivani karikarshivani deleted the V-73217_change_to_manual_review branch July 29, 2021 17:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants