Skip to content

CMP-3916: Add runtime SSHD config checking for OpenShift #14118

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 7 commits into
base: master
Choose a base branch
from
+104 −15
Open

CMP-3916: Add runtime SSHD config checking for OpenShift #14118

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
22e46de
Add runtime SSHD config checking for OpenShift
Vincent056 Nov 12, 2025
c5e83ee
Update SSHD runtime check configuration and OVAL macros
Vincent056 Nov 15, 2025
b01b3d6
Update OVAL macro to convert string values to lowercase for runtime s…
Vincent056 Nov 18, 2025
f3038dd
Update product stability to include sshd_runtime_check
rhmdnd Nov 18, 2025
a037341
Update products/rhcos4/product.yml
Vincent056 Nov 19, 2025
09a937c
Updated the OVAL macro to set the criteria operator for the SSHD conf…
Vincent056 Nov 19, 2025
90898bd
Remove unused runtime configuration check from OVAL macro.
Vincent056 Nov 25, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions products/rhcos4/product.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,10 @@ groups:

sshd_distributed_config: "true"

# Enable runtime sshd configuration checking for compliance operator scans
# Compliance Operator fetches the result of sshd -T and stores it in a file
sshd_runtime_check: "true"

cpes_root: "../../shared/applicability"
cpes:
- rhcos4:
Expand Down
76 changes: 65 additions & 11 deletions shared/macros/10-oval.jinja
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1033,9 +1033,10 @@ Generates the :code:`<affected>` tag for OVAL check using correct product platfo
:type datatype: str

#}}
{{%- macro sshd_oval_check(parameter, value, missing_parameter_pass, config_is_distributed, xccdf_variable="", datatype="", rule_id=None, rule_title=None) -%}}
{{%- macro sshd_oval_check(parameter, value, missing_parameter_pass, config_is_distributed, runtime_check="false", xccdf_variable="", datatype="", rule_id=None, rule_title=None) -%}}
{{%- set sshd_config_path = "/etc/ssh/sshd_config" %}}
{{%- set sshd_config_dir = "/etc/ssh/sshd_config.d" -%}}
{{%- set sshd_runtime_path = "/tmp/runtime/sshd_effective_config" -%}}
{{%- if xccdf_variable -%}}
{{%- set description = "Ensure '" ~ parameter ~ "' is configured with value configured in " ~ xccdf_variable ~ " variable in " ~ sshd_config_path %}}
{{%- else -%}}
Expand Down Expand Up @@ -1072,18 +1073,28 @@ Generates the :code:`<affected>` tag for OVAL check using correct product platfo
definition_ref="package_openssh-server_installed" />
{{% endif %}}
<criteria comment="sshd is configured correctly" operator="AND">
<criteria comment="the configuration is correct if it exists" operator="AND">
{{{- oval_line_in_file_criterion(sshd_config_path, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(10)}}}
{{%- if config_is_distributed == "true" %}}
{{{- oval_line_in_directory_criterion(sshd_config_dir, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(10) }}}
{{%- endif %}}
{{% if product in ["ol8", "ol9"] %}}
{{{- oval_line_in_file_criterion("sshd_config included", parameter, id_stem=rule_id ~ "_sshd_included_files", avoid_conflicting=true, rule_id=rule_id) | indent(10)}}}
{{%- if runtime_check == "true" %}}
<criteria comment="runtime configuration exists and is correct" operator="AND">
<criterion comment="runtime config file exists" test_ref="test_runtime_config_present_{{{ rule_id }}}" />
<criterion comment="runtime config matches expected value" test_ref="test_runtime_{{{ parameter }}}_{{{ rule_id }}}" />
</criteria>
{{%- endif %}}
{{%- if runtime_check != "true" %}}
Copy link
Contributor

@svet-se svet-se Nov 28, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

{{%- if runtime_check != "true" %}} looks to me as {{%- else %}}

<criteria comment="static configuration is correct" operator="AND">
<criteria comment="the configuration is correct if it exists" operator="AND">
{{{- oval_line_in_file_criterion(sshd_config_path, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(12)}}}
{{%- if config_is_distributed == "true" %}}
{{{- oval_line_in_directory_criterion(sshd_config_dir, parameter, avoid_conflicting=true, rule_id=rule_id) | indent(12) }}}
{{%- endif %}}
{{% if product in ["ol8", "ol9"] %}}
{{{- oval_line_in_file_criterion("sshd_config included", parameter, id_stem=rule_id ~ "_sshd_included_files", avoid_conflicting=true, rule_id=rule_id) | indent(12)}}}
{{% endif %}}
</criteria>
{{%- if not missing_parameter_pass %}}
<criterion comment="the configuration exists" test_ref="test_{{{ parameter }}}_present_{{{ rule_id }}}" />
{{% endif %}}
</criteria>
{{%- if not missing_parameter_pass %}}
<criterion comment="the configuration exists" test_ref="test_{{{ parameter }}}_present_{{{ rule_id }}}" />
{{% endif %}}
{{%- endif %}}
</criteria>
</criteria>
</criteria>
Expand Down Expand Up @@ -1162,6 +1173,49 @@ Generates the :code:`<affected>` tag for OVAL check using correct product platfo
</ind:textfilecontent54_test>

{{% endif %}}

{{%- if runtime_check == "true" %}}
<!-- Runtime configuration checks -->
<ind:textfilecontent54_test id="test_runtime_config_present_{{{ rule_id }}}" version="1"
check="all" check_existence="at_least_one_exists"
comment="Check if runtime config file exists">
<ind:object object_ref="obj_runtime_config_file_{{{ rule_id }}}" />
</ind:textfilecontent54_test>

<ind:textfilecontent54_object id="obj_runtime_config_file_{{{ rule_id }}}" version="1">
<ind:filepath>{{{ sshd_runtime_path }}}</ind:filepath>
<ind:pattern operation="pattern match">.*</ind:pattern>
<ind:instance datatype="int">1</ind:instance>
</ind:textfilecontent54_object>

<ind:textfilecontent54_test id="test_runtime_{{{ parameter }}}_{{{ rule_id }}}" version="1"
check="all" check_existence="at_least_one_exists"
comment="Check runtime {{{ parameter }}} value">
<ind:object object_ref="obj_runtime_{{{ parameter }}}_{{{ rule_id }}}" />
{{%- if xccdf_variable -%}}
<ind:state state_ref="state_runtime_{{{ parameter }}}_{{{ rule_id }}}_xccdf" />
{{%- else -%}}
<ind:state state_ref="state_runtime_{{{ parameter }}}_{{{ rule_id }}}" />
{{%- endif -%}}
</ind:textfilecontent54_test>

<ind:textfilecontent54_object id="obj_runtime_{{{ parameter }}}_{{{ rule_id }}}" version="1">
<ind:filepath>{{{ sshd_runtime_path }}}</ind:filepath>
<ind:pattern operation="pattern match">^[\s]*{{{ parameter | lower }}}[\s]+(.*)$</ind:pattern>
<ind:instance datatype="int">1</ind:instance>
</ind:textfilecontent54_object>

{{%- if xccdf_variable -%}}
<ind:textfilecontent54_state id="state_runtime_{{{ parameter }}}_{{{ rule_id }}}_xccdf" version="1">
<ind:subexpression operation="equals" datatype="{{{ datatype }}}" var_ref="{{{ xccdf_variable }}}" />
</ind:textfilecontent54_state>
{{%- else -%}}
<ind:textfilecontent54_state id="state_runtime_{{{ parameter }}}_{{{ rule_id }}}" version="1">
<ind:subexpression operation="{{{ 'pattern match' if datatype == 'string' else 'equals' }}}" datatype="{{{ datatype }}}">{{{ value | lower if datatype == 'string' else value }}}</ind:subexpression>
</ind:textfilecontent54_state>
{{%- endif -%}}
{{%- endif %}}

</def-group>
{{%- endmacro %}}

Expand Down
4 changes: 2 additions & 2 deletions shared/templates/sshd_lineinfile/oval.template
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
{{%- if XCCDF_VARIABLE -%}}
{{{ sshd_oval_check(parameter=PARAMETER, xccdf_variable=XCCDF_VARIABLE, missing_parameter_pass=MISSING_PARAMETER_PASS, config_is_distributed=sshd_distributed_config, datatype=DATATYPE, rule_id=rule_id, rule_title=rule_title) }}}
{{{ sshd_oval_check(parameter=PARAMETER, xccdf_variable=XCCDF_VARIABLE, missing_parameter_pass=MISSING_PARAMETER_PASS, config_is_distributed=sshd_distributed_config, runtime_check=sshd_runtime_check, datatype=DATATYPE, rule_id=rule_id, rule_title=rule_title) }}}
{{%- else -%}}
{{{ sshd_oval_check(parameter=PARAMETER, value=VALUE, missing_parameter_pass=MISSING_PARAMETER_PASS, config_is_distributed=sshd_distributed_config, datatype=DATATYPE, rule_id=rule_id, rule_title=rule_title) }}}
{{{ sshd_oval_check(parameter=PARAMETER, value=VALUE, missing_parameter_pass=MISSING_PARAMETER_PASS, config_is_distributed=sshd_distributed_config, runtime_check=sshd_runtime_check, datatype=DATATYPE, rule_id=rule_id, rule_title=rule_title) }}}
{{%- endif -%}}
1 change: 1 addition & 0 deletions ssg/constants.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -462,6 +462,7 @@
DEFAULT_RSYSLOG_CAFILE = '/etc/pki/tls/cert.pem'
DEFAULT_FAILLOCK_PATH = '/var/run/faillock'
DEFAULT_SSH_DISTRIBUTED_CONFIG = 'false'
DEFAULT_SSH_RUNTIME_CHECK = 'false'
DEFAULT_PRODUCT = 'example'
DEFAULT_CHRONY_CONF_PATH = '/etc/chrony.conf'
DEFAULT_CHRONY_D_PATH = '/etc/chrony.d/'
Expand Down
4 changes: 4 additions & 0 deletions ssg/products.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,7 @@
DEFAULT_AUDIT_WATCHES_STYLE,
DEFAULT_RSYSLOG_CAFILE,
DEFAULT_SSH_DISTRIBUTED_CONFIG,
DEFAULT_SSH_RUNTIME_CHECK,
DEFAULT_CHRONY_CONF_PATH,
DEFAULT_CHRONY_D_PATH,
DEFAULT_AUDISP_CONF_PATH,
Expand Down Expand Up @@ -108,6 +109,9 @@ def _get_implied_properties(existing_properties):
if "sshd_distributed_config" not in existing_properties:
result["sshd_distributed_config"] = DEFAULT_SSH_DISTRIBUTED_CONFIG

if "sshd_runtime_check" not in existing_properties:
result["sshd_runtime_check"] = DEFAULT_SSH_RUNTIME_CHECK

if "product" not in existing_properties:
result["product"] = DEFAULT_PRODUCT

Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/alinux2.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -85,6 +85,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/alinux3.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -85,6 +85,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/anolis23.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,6 +84,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/anolis8.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,6 +84,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/debian11.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,6 +94,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/debian12.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/debian13.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/eks.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -92,6 +92,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/example.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,6 +86,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/fedora.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -130,6 +130,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
sshd_distributed_config: 'true'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/firefox.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81,6 +81,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ocp4.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -192,6 +192,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ol7.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -96,6 +96,7 @@ reference_uris:
release_key_fingerprint: 42144123FECFC55B9086313D72F97B74EC551F03
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ol8.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,7 @@ reference_uris:
release_key_fingerprint: 76FD3DB13AB67410B89DB10E82562EA9AD986DA3
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ol9.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -99,6 +99,7 @@ reference_uris:
release_key_fingerprint: 3E6D826D3FBAB389C2F38E34BC4D06A08D8B756F
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'true'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/openembedded.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -97,6 +97,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
5 changes: 3 additions & 2 deletions tests/data/product_stability/opensuse.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -92,8 +92,9 @@ reference_uris:
stigid: https://www.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: "false"
sysctl_remediate_drop_in_file: "false"
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
- 11
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/rhcos4.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -90,6 +90,7 @@ reference_uris:
release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'true'
sshd_runtime_check: 'true'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/rhel10.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -97,6 +97,7 @@ reference_uris:
release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
rsyslog_cafile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
sshd_distributed_config: 'true'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/rhel8.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -147,6 +147,7 @@ reference_uris:
release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/rhel9.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -104,6 +104,7 @@ reference_uris:
release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'true'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/rhv4.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,7 @@ reference_uris:
release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/sle12.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'true'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/sle15.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -101,6 +101,7 @@ reference_uris:
release_key_fingerprint: FEAB502539D846DB2C0961CA70AF9E8139DB7C82
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'true'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ubuntu2204.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -103,6 +103,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'true'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ubuntu2404.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -104,6 +104,7 @@ reference_uris:
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'true'
sshd_runtime_check: 'false'
sysctl_remediate_drop_in_file: 'false'
target_oval_version:
- 5
Expand Down
Loading