Skip to content

Commit

Permalink
Automated ingestion of profiles
Browse files Browse the repository at this point in the history
Signed-off-by: MITRE SAF <[email protected]>
  • Loading branch information
MITRE SAF committed Dec 19, 2024
1 parent fe6fcce commit e891e7d
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -9534,7 +9534,7 @@
],
"host": null
},
"code": "control 'SV-230247' do\n title 'The RHEL 8 /var/log/messages file must be group-owned by root.'\n desc \"Only authorized personnel should be aware of errors and the details of\nthe errors. Error messages are an indicator of an organization's operational\nstate or can identify the RHEL 8 system or platform. Additionally, Personally\nIdentifiable Information (PII) and operational information must not be revealed\nthrough error messages to unauthorized personnel or their designated\nrepresentatives.\n\n The structure and content of error messages must be carefully considered by\nthe organization and development team. The extent to which the information\nsystem is able to identify and handle error conditions is guided by\norganizational policy and operational requirements.\"\n desc 'check', 'Verify the \"/var/log/messages\" file is group-owned by root with the\nfollowing command:\n\n $ sudo stat -c \"%G\" /var/log/messages\n\n root\n\n If \"root\" is not returned as a result, this is a finding.'\n desc 'fix', 'Change the group of the file \"/var/log/messages\" to \"root\" by running\nthe following command:\n\n $ sudo chgrp root /var/log/messages'\n impact 0.5\n ref 'DPMS Target Red Hat Enterprise Linux 8'\n tag severity: 'medium'\n tag gtitle: 'SRG-OS-000206-GPOS-00084'\n tag gid: 'V-230247'\n tag rid: 'SV-230247r627750_rule'\n tag stig_id: 'RHEL-08-010230'\n tag fix_id: 'F-32891r567488_fix'\n tag cci: ['CCI-001314']\n tag nist: ['SI-11 b']\n tag 'host'\n\n only_if('This control is Not Applicable to containers', impact: 0.0) {\n !virtualization.system.eql?('docker')\n }\n\n describe.one do\n describe file('/var/log/messages') do\n its('group') { should be_in input('var_log_messages_group') }\n end\n describe file('/var/log/messages') do\n it { should_not exist }\n end\n end\nend\n",
"code": "control 'SV-230247' do\n title 'The RHEL 8 /var/log/messages file must be group-owned by root.'\n desc \"Only authorized personnel should be aware of errors and the details of\nthe errors. Error messages are an indicator of an organization's operational\nstate or can identify the RHEL 8 system or platform. Additionally, Personally\nIdentifiable Information (PII) and operational information must not be revealed\nthrough error messages to unauthorized personnel or their designated\nrepresentatives.\n\n The structure and content of error messages must be carefully considered by\nthe organization and development team. The extent to which the information\nsystem is able to identify and handle error conditions is guided by\norganizational policy and operational requirements.\"\n desc 'check', 'Verify the \"/var/log/messages\" file is group-owned by root with the\nfollowing command:\n\n $ sudo stat -c \"%G\" /var/log/messages\n\n root\n\n If \"root\" is not returned as a result, this is a finding.'\n desc 'fix', 'Change the group of the file \"/var/log/messages\" to \"root\" by running\nthe following command:\n\n $ sudo chgrp root /var/log/messages'\n impact 0.5\n ref 'DPMS Target Red Hat Enterprise Linux 8'\n tag severity: 'medium'\n tag gtitle: 'SRG-OS-000206-GPOS-00084'\n tag gid: 'V-230247'\n tag rid: 'SV-230247r627750_rule'\n tag stig_id: 'RHEL-08-010230'\n tag fix_id: 'F-32891r567488_fix'\n tag cci: ['CCI-001314']\n tag nist: ['SI-11 b']\n tag 'host'\n\n only_if('This control is Not Applicable to containers', impact: 0.0) {\n !virtualization.system.eql?('docker')\n }\n\n var_log_messages_group = input('var_log_messages_group')\n\n describe.one do\n describe file('/var/log/messages') do\n its('group') { should be_in var_log_messages_group }\n end\n describe file('/var/log/messages') do\n it { should_not exist }\n end\n end\nend\n",
"source_location": {
"ref": "./Red Hat 8 STIG/controls/SV-230247.rb",
"line": 1
Expand Down Expand Up @@ -17263,7 +17263,7 @@
"id": "controls/SV-230508.rb"
}
],
"sha256": "eaf08a3d96a7aa5443b59ee460282f9786d4e0d7c29c497bb7f767b20c6aef05",
"sha256": "85b4c5d4cd8ccdb0840c6af829c79db05dac9a8b290f3762ff2abfa2c37f1f37",
"status_message": "",
"status": "loaded",
"generator": {
Expand Down

0 comments on commit e891e7d

Please sign in to comment.