I ran an oscap scan using the xccdf_org.ssgproject.content_profile_stig profile.
Description of problem:
Rule ID xccdf_org.ssgproject.content_rule_harden_sshd_ciphers_openssh_conf_crypto_policy failed despite the openssh.config line it was complaining about matching. Except when I copy/pasted the content I found that the check text is misformatted:
There is extra whitespace and it's failing the check due to this unnecessary whitespace. Manual testing showed if there was not both a newline plus the 12 spaces the check will fail despite the extra whitespace having no actual effect.
Proposed change:
The text to match against should not include the excess whitespace.
Share the context
After installing RHEL 8.10 using kickstart with following configuration:
I ran an
oscap
scan using thexccdf_org.ssgproject.content_profile_stig
profile.Description of problem:
Rule ID
xccdf_org.ssgproject.content_rule_harden_sshd_ciphers_openssh_conf_crypto_policy
failed despite the openssh.config line it was complaining about matching. Except when I copy/pasted the content I found that the check text is misformatted:There is extra whitespace and it's failing the check due to this unnecessary whitespace. Manual testing showed if there was not both a newline plus the 12 spaces the check will fail despite the extra whitespace having no actual effect.
Proposed change:
The text to match against should not include the excess whitespace.