Commits on Oct 4, 2024

1. Create CIS rules for login banners …

   RHEL 8 CIS Benchmark v3.0.0 and RHEL 9 CIS Benchmark v2.0.0 in sections
   1.7.1, 1.7.2 and 1.7.3 require to configure login banners. Currently,
   these requirements are covered in our content by rules `banner_etc_motd`,
   `banner_etc_issue` and `banner_etc_issue_net`. However, these rules
   don't exactly align with the CIS requirements. The rules require an
   exact banner text that can only differ in white space but must be the
   same. But, the CIS requirements allow custom banner texts with local
   policy. Moreover, they require not displaying versions and kernels
   in the banner text, which isn't checked in our rules. Although applying
   our rules makes the system compliant, many configurations that comply
   with CIS will not pass the scan. We will replace these rules with new
   rules that are better aligned with CIS and will pass with custom
   banners. The new rules are very similar and therefore a new template
   `cis_banner` has been created to share code among them.
   
   Resolves: https://issues.redhat.com/browse/RHEL-59133

   

   jan-cerny committed Oct 4, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 264af69
   • Browse repository at this point

   Copy the full SHA

   264af69 View commit details

   Browse the repository at this point in the history