scap-security-guide April 2021

scap-security-guide@lists.fedorahosted.org

3 participants
2 discussions

RHEL 8 Security Guide
by MyNicePC 14 May '21

14 May '21

Hello, I just installed Openscap Workbench on my laptop. I have apways been able to scan RHEL 6 and RHEL 7 servers using security guides provided within OpenScap. Does anyone know if you support a security guide for RHEL 8? Thank you, JR

4 3

RHEL7 STIG on Local Interactive Users
by Parker, Ryan 30 Apr '21

30 Apr '21

Hello, I have been working on automating some of the manual items within the RHEL7 STIG that are not covered by the DISA-provided SCAP benchmark nor are they covered by OpenSCAP content. Specifically, I have been working on automating the items that pertain to what the STIG describes as "local interactive users." A significant portion of these items use specific commands referencing /etc/passwd to check the home directory assignment for all local interactive users. For example, in the Check Text section of RHEL-07-020620 (All local interactive users must have a home directory assigned and defined in the /etc/passwd file): awk -F: '($3>=1000)&&($7 !~ /nologin/){print $1, $3, $6}' /etc/passwd However, nearly all of the RHEL7 systems that I support are joined to an Active Directory domain using realmd and SSSD. Therefore, the above check command does not work out-of-the-box for AD-authenticated users since none of them have an entry in /etc/passwd. Therefore, I wanted to discuss what others have done for these STIG items and to bring up the subject of what constitutes as a "local interactive user," or at least what DISA is defining such user as. I presume local interactive users would mean root and various service accounts, but I am unsure if this is what DISA is targeting. V/r, Ryan Parker Research Scientist I GTRI | ISD - Secure Computing Department w: 404-407-7320 e: ryan.parker(a)gtri.gatech.edu<mailto:ryan.parker@gtri.gatech.edu><mailto:Ryan.Parker@gtri.gatech.edu>

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

scap-security-guide April 2021