search

GSA / security-benchmarks

GSA Security Benchmarks and Tools
21 stars 10 forks source link

Ubuntu 18 Nessus template needed for Login.gov to use #34

Closed mzia closed 5 years ago

mzia commented 5 years ago

login.gov just moved over to Ubuntu 18.04. We need a new Nessus template from GSA for it.

mzia commented 5 years ago

Having issues with new ubuntu 18 template

Line 449 is throwing an error in nessus so the compliance scan fails.

Line 449 solution : "Edit the /etc/issue file with the appropriate contents according to your site policy, remove any instances of \m, \r, \s, or \v: # echo 'This is a U.S. General Services Administration Federal Government computer system that is "FOR OFFICIAL USE ONLY." This system is subject to monitoring. Therefore, no expectation of privacy is to be assumed. Individuals found performing unauthorized activities may be subject to disciplinary action including criminal prosecution.' > /etc/issue"

Probably needs it in this format \\"FOR OFFICIAL USE ONLY\\.\\"

lambardo-richards commented 5 years ago

Removed the double quotes for that line and other similar lines in the audit file.

Provisioned consumer revised audit file to test before committing it to the repository.

Once confirmed resolved, will close issue.

lambardo-richards commented 5 years ago

Consumer confirmed successful scan with revised Ubuntu 18 audit file.