-
Bug
-
Resolution: Done-Errata
-
Undefined
-
rhel-9.6
-
None
-
scap-security-guide-0.1.78-1.el9
-
Yes
-
Low
-
rhel-security-compliance
-
1
-
False
-
False
-
-
No
-
Red Hat Enterprise Linux
-
None
-
Pass
-
Manual
-
Unspecified Release Note Type - Unknown
-
Unspecified
-
Unspecified
-
Unspecified
-
None
As per CIS_Red_Hat_Enterprise_Linux_9_Benchmark_v2.0.0 specification, rule ensure_gpgcheck_never_disabled is supposed to be selected for CIS Level 1 (page 134), but for some reason it's only selected for CIS level 1 on RHEL8:
$ grep -rw ensure_gpgcheck_never_disabled | grep cis [...] controls/cis_sle12.yml: - ensure_gpgcheck_never_disabled controls/cis_rhel8.yml: - ensure_gpgcheck_never_disabled controls/cis_sle15.yml: - ensure_gpgcheck_never_disabled
Only ensure_gpgcheck_globally_activated part is enabled on RHEL9.
- links to
-
RHBA-2025:154689
scap-security-guide bug fix and enhancement update
