Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-1905

[RHEL8.8/SCAP/Bug] New check content_rule_ensure_pam_wheel_group_empty unknown what is wrong

    • Critical
    • sst_security_compliance
    • ssg_security
    • 26
    • 2
    • False
    • Hide


    • No
    • None
    • None

      Description of problem:

      In the latest scap-security-guide 0.1.69 there is a new check xccdf_org.ssgproject.content_rule_ensure_pam_wheel_group_empty that has no clear guidinace what is wrong. It just displays the /etc/group and that is it. There is no further guidance what is wrong or missing in the /etc/group with it.

      I have the idea this check is a Sub-check of xccdf_org.ssgproject.content_rule_ensure_pam_wheel_group_empty and has to be ignored if this parent check to use the pam_wheel for su is not used.

      Version-Release number of selected component (if applicable):
      scap-security-guide 0.1.69

      Actual results:
      New strange Compliance failure without a clue what to do

      Expected results:
      Provide a clue what action should be taken

      Additional info:

            maburgha@redhat.com Marcus Burghardt
            rhn-support-rdulhani Rajesh Dulhani
            Marcus Burghardt Marcus Burghardt
            Milan Lysonek Milan Lysonek
            Jan Fiala Jan Fiala
            0 Vote for this issue
            14 Start watching this issue