This InSpec compliance profile implement the ElasticSearch Security Technical Implementation Guide (STIG) - (Draft) in an automated way to provide security best-practice tests around ElasticSearch with X-pack server and system settings in a production environment.
Other
5
stars
1
forks
source link
SC-9 (1) and SC-9 (2) tags cause issues with inspecJS #1
Trying to load the profile JSON from this profile into inspecJS currently raises errors due to it containing
SC-9 (1)andSC-9 (2)tags:https://github.com/mitre/elasticsearch-stig-baseline/blob/65f7d00a7400dd117957812dab1adc17216c345d/controls/V-27061.rb#L35 https://github.com/mitre/elasticsearch-stig-baseline/blob/65f7d00a7400dd117957812dab1adc17216c345d/controls/V-27062.rb#L36
Additionally, the base SC-9 tag may be removed as well: https://github.com/mitre/elasticsearch-stig-baseline/blob/65f7d00a7400dd117957812dab1adc17216c345d/controls/V-27060.rb#L34