Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated 6 rules 2 for sle micro #12331

Conversation

rumch-se
Copy link
Contributor

Description:

  • The PR includes updates of 6 rules to support new SUSE product sle micro according to DISA STIG

Rationale:

  • The list of the rules is
    auditd_audispd_network_failure_action
    auditd_audispd_disk_full_action
    accounts_have_homedir_login_defs
    no_empty_passwords_etc_shadow
    no_empty_passwords
    audit_rules_enable_syscall_auditing

@openshift-ci openshift-ci bot added the needs-ok-to-test Used by openshift-ci bot. label Aug 23, 2024
Copy link

openshift-ci bot commented Aug 23, 2024

Hi @rumch-se. Thanks for your PR.

I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Copy link

Start a new ephemeral environment with changes proposed in this pull request:

rhel8 (from CTF) Environment (using Fedora as testing environment)
Open in Gitpod

Fedora Testing Environment
Open in Gitpod

Oracle Linux 8 Environment
Open in Gitpod

Copy link

github-actions bot commented Aug 23, 2024

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:12331
This image was built from commit: 8237441

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:12331

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:12331 make deploy-local

Copy link
Contributor

@teacup-on-rockingchair teacup-on-rockingchair left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@teacup-on-rockingchair teacup-on-rockingchair added this to the 0.1.75 milestone Aug 26, 2024
@teacup-on-rockingchair teacup-on-rockingchair added SLES SUSE Linux Enterprise Server product related. Update Rule Issues or pull requests related to Rules updates. labels Aug 27, 2024
@teacup-on-rockingchair
Copy link
Contributor

@ComplianceAsCode/trusted-developers anyone can help with the failing test that prevent this PR from merging?

@Mab879
Copy link
Member

Mab879 commented Sep 17, 2024

/packit retest-failed

@marcusburghardt
Copy link
Member

@ComplianceAsCode/trusted-developers anyone can help with the failing test that prevent this PR from merging?

It seems the issue with the no_empty_passwords rule is legit. I couldn't go deep investigating the cause of the issue, but tested the rule with master branch and it worked fine. When testing it with this PR, it is failing. Could you review any change involving this rule, please?

@teacup-on-rockingchair teacup-on-rockingchair marked this pull request as draft September 24, 2024 12:58
@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Used by openshift-ci bot. label Sep 24, 2024
Copy link

codeclimate bot commented Sep 26, 2024

Code Climate has analyzed commit 8237441 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 59.5% (0.0% change).

View more on Code Climate.

@teacup-on-rockingchair teacup-on-rockingchair marked this pull request as ready for review September 26, 2024 05:28
@openshift-ci openshift-ci bot removed the do-not-merge/work-in-progress Used by openshift-ci bot. label Sep 26, 2024
@teacup-on-rockingchair
Copy link
Contributor

@ComplianceAsCode/trusted-developers anyone can help with the failing test that prevent this PR from merging?

It seems the issue with the no_empty_passwords rule is legit. I couldn't go deep investigating the cause of the issue, but tested the rule with master branch and it worked fine. When testing it with this PR, it is failing. Could you review any change involving this rule, please?

thanks 🙇

@teacup-on-rockingchair teacup-on-rockingchair merged commit b334566 into ComplianceAsCode:master Sep 26, 2024
91 of 93 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs-ok-to-test Used by openshift-ci bot. SLES SUSE Linux Enterprise Server product related. Update Rule Issues or pull requests related to Rules updates.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants