simp / inspec-profile-disa_stig-el7

InSpec Profile for the EL7 DISA STIG
Apache License 2.0
22 stars 46 forks source link

V-71941 could return a false pass #93

Closed rx294 closed 4 years ago

rx294 commented 4 years ago

The test with current design will return a false pass when INACTIVE is set to default value -1 which disables feature

https://github.com/simp/inspec-profile-disa_stig-el7/blob/ecdf03ee922373c486286c5cfe67ef608bae874f/controls/V-71941.rb#L46

A check should be added to verify that INACTIVE >= 0

aaronlippold commented 4 years ago

@djhaynes can you open a PR for this

aaronlippold commented 4 years ago

@rx294 can you ask Danny or could you open a PR for this