Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-89812

OSCAP Scan is showing False Positive

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • scap-security-guide-0.1.78-1.el9
    • No
    • Low
    • rhel-security-compliance
    • ssg_security
    • 2
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • None
    • Unspecified Release Note Type - Unknown
    • Unspecified
    • Unspecified
    • Unspecified
    • x86_64
    • None

      What were you trying to do that didn't work?

      Some rules being marked as FAIL in the scan output report, while they already meet the requirements

      Issue 1:
      Ensure That the sudo Binary Has the Correct Permissions (xccdf_org.ssgproject.content_rule_file_permissions_sudo)
      The system has the correct permission (-sx-x) of the "/usr/bin/sudo" file

      Issue 2:

      Both the remediation script and playbook set permissions wrongly to 4110 for /usr/bin/sudo which will cause issues to other users by losing SUDO access

      Issue 3
      Enable cron Service (xccdf_org.ssgproject.content_rule_service_cron_enabled)
      crond.service is already Active and Enabled

      Issue 4:
      Enable the SSSD Service (xccdf_org.ssgproject.content_rule_service_sssd_enabled)
      sssd.service is Enabled, however it cannot be activated because the Raw Image does not have the file (/etc/sssd/sssd.conf) by default

      Affected version:
      openscap-scanner-1.3.10-2.el8_9.x86_64
      openscap-scanner-1.3.10-2.el9_3.x86_64

              vpolasek@redhat.com Vojtech Polasek
              rhn-support-prjagtap Pradeep Jagtap
              Vojtech Polasek Vojtech Polasek
              Matus Marhefka Matus Marhefka
              Votes:
              1 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated:
                Resolved: