ComplianceAsCode / content

Security automation content in SCAP, Bash, Ansible, and other formats
https://complianceascode.readthedocs.io/en/latest/
Other
2.22k stars 698 forks source link

SLE15 related fixes in ntp and aide rules #12548

Closed teacup-on-rockingchair closed 3 weeks ago

teacup-on-rockingchair commented 3 weeks ago

Description:

Rationale:

github-actions[bot] commented 3 weeks ago

Start a new ephemeral environment with changes proposed in this pull request:

rhel8 (from CTF) Environment (using Fedora as testing environment) Open in Gitpod

Fedora Testing Environment Open in Gitpod

Oracle Linux 8 Environment Open in Gitpod

github-actions[bot] commented 3 weeks ago

This datastream diff is auto generated by the check Compare DS/Generate Diff

Click here to see the full diff ```diff bash remediation for rule 'xccdf_org.ssgproject.content_rule_chronyd_or_ntpd_set_maxpoll' differs. --- xccdf_org.ssgproject.content_rule_chronyd_or_ntpd_set_maxpoll +++ xccdf_org.ssgproject.content_rule_chronyd_or_ntpd_set_maxpoll @@ -20,7 +20,7 @@ for config_file in "${CONFIG_FILES[@]}" ; do # Set maxpoll values to var_time_service_set_maxpoll - sed -i "s/^\(\(server\|pool\|peer\).*maxpoll\) [0-9][0-9]*\(.*\)$/\1 $var_time_service_set_maxpoll \3/" "$config_file" + sed -i "s/^\(\(server\|pool\|peer\).*maxpoll\) [0-9,-][0-9]*\(.*\)$/\1 $var_time_service_set_maxpoll \3/" "$config_file" done for config_file in "${CONFIG_FILES[@]}" ; do ansible remediation for rule 'xccdf_org.ssgproject.content_rule_chronyd_or_ntpd_set_maxpoll' differs. --- xccdf_org.ssgproject.content_rule_chronyd_or_ntpd_set_maxpoll +++ xccdf_org.ssgproject.content_rule_chronyd_or_ntpd_set_maxpoll @@ -172,7 +172,7 @@ - name: Configure Time Service Maxpoll Interval - Update the maxpoll Values in /etc/chrony.d/ ansible.builtin.replace: path: '{{ item.path }}' - regexp: ^((?:server|pool|peer).*maxpoll)[ ]+[0-9]+(.*)$ + regexp: ^((?:server|pool|peer).*maxpoll)[ ]+[0-9,-]+(.*)$ replace: \1 {{ var_time_service_set_maxpoll }}\2 loop: '{{ chrony_d_conf_files.files }}' when: ```
codeclimate[bot] commented 3 weeks ago

Code Climate has analyzed commit ea19d37c and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 60.9% (0.0% change).

View more on Code Climate.