SV-257786

mitre · Oct 13, 2023 · 061dd09 · 061dd09
1 parent e93cc7e
commit 061dd09
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/controls/SV-257786.rb b/controls/SV-257786.rb
@@ -29,4 +29,21 @@
   tag 'documentable'
   tag cci: ['CCI-000366', 'CCI-002235']
   tag nist: ['CM-6 b', 'AC-6 (10)']
+
+  if virtualization.system.eql?('docker')
+    impact 0.0
+    describe "Control not applicable within a container" do
+      skip "Control not applicable within a container"
+    end
+  else
+    d = systemd_service('debug-shell.service')
+    describe.one do
+      describe d do
+        its('params.LoadState') { should eq 'masked' }
+      end
+      describe d do
+        its('params.LoadState') { should eq 'not-found' }
+      end
+    end
+  end
 end