Project

General

Profile

Actions

action #156679

closed

[security] OSCAP BASH tests for profiles HIPAA and PCI-DSS-4 failing on SP6 build after 15-SP6-Build58.1

Added by viktors.trubovics 10 months ago. Updated 7 months ago.

Status:
Resolved
Priority:
Normal
Category:
-
Target version:
-
Start date:
2024-03-05
Due date:
% Done:

100%

Estimated time:
4.00 h
Difficulty:
medium

Description

BASH HIPPA fails on SLES15 SP6:
https://openqa.suse.de/tests/13716835#step/oscap_xccdf_eval#2/26
#Rules failed (not in expected list):
xccdf_org.ssgproject.content_rule_sshd_disable_kerb_auth
xccdf_org.ssgproject.content_rule_sshd_disable_empty_passwords
xccdf_org.ssgproject.content_rule_sshd_enable_warning_banner
xccdf_org.ssgproject.content_rule_sshd_do_not_permit_user_env
xccdf_org.ssgproject.content_rule_sshd_enable_strictmodes
xccdf_org.ssgproject.content_rule_sshd_disable_root_login
xccdf_org.ssgproject.content_rule_disable_host_auth
xccdf_org.ssgproject.content_rule_sshd_disable_gssapi_auth

PCI-DSS fails https://openqa.suse.de/tests/13716834#step/oscap_xccdf_eval#2/26
#Rules failed (not in expected list):
xccdf_org.ssgproject.content_rule_sshd_set_keepalive
xccdf_org.ssgproject.content_rule_sshd_disable_rhosts
xccdf_org.ssgproject.content_rule_sshd_use_approved_ciphers
xccdf_org.ssgproject.content_rule_sshd_disable_tcp_forwarding
xccdf_org.ssgproject.content_rule_sshd_set_max_auth_tries
xccdf_org.ssgproject.content_rule_sshd_set_max_sessions
xccdf_org.ssgproject.content_rule_sshd_set_maxstartups
xccdf_org.ssgproject.content_rule_sshd_set_loglevel_verbose
xccdf_org.ssgproject.content_rule_disable_host_auth
xccdf_org.ssgproject.content_rule_sshd_use_approved_macs
xccdf_org.ssgproject.content_rule_sshd_set_login_grace_time
xccdf_org.ssgproject.content_rule_sshd_disable_x11_forwarding
xccdf_org.ssgproject.content_rule_file_permissions_sshd_config
xccdf_org.ssgproject.content_rule_sshd_use_strong_kex
xccdf_org.ssgproject.content_rule_sshd_disable_empty_passwords
xccdf_org.ssgproject.content_rule_sshd_do_not_permit_user_env
xccdf_org.ssgproject.content_rule_sshd_disable_root_login
Looks Product is broken since build 15-SP6-Build58.1
On SP4 and SP5 tests are passing.

Actions

Also available in: Atom PDF