ComplianceAsCode / content

Security automation content in SCAP, Bash, Ansible, and other formats
https://complianceascode.readthedocs.io/en/latest/
Other
2.22k stars 698 forks source link

Ubuntu 22.04 STIG: disable_ctrlaltdel_burstaction included in check but not upstream #12556

Closed jaredledvina closed 18 hours ago

jaredledvina commented 3 weeks ago

Description of problem:

Currently, disable_ctrlaltdel_burstaction is marked in https://github.com/ComplianceAsCode/content/blob/21a4c72c55245b055fbf2d767beb7e7e704e37e7/products/ubuntu2204/profiles/stig.profile#L562

However, upstream the STIG control 260469 does not require/reference this rule. The check text is just

"Verify Ubuntu 22.04 LTS is not configured to reboot the system when Ctrl-Alt-Delete is pressed by using the following command: 

     $ systemctl status ctrl-alt-del.target 
     ctrl-alt-del.target 
          Loaded: masked (Reason: Unit ctrl-alt-del.target is masked.) 
          Active: inactive (dead) 

If the ""ctrl-alt-del.target"" is not masked, this is a finding."

which is covered by the disable_ctrlaltdel_reboot check.

Details:

This content is not aligned with content from

The misalignment affects these profiles:

The misalignment affects these rules:

Outcome:

SCAP Security Guide Version: Unknown...how do I determine this?

External Content's Version: v2r2

dodys commented 3 weeks ago

@mpurg fyi

mpurg commented 2 days ago

Thanks for pointing this out @jaredledvina . Fixed in #12620