Skip to content

Update CA file path #13328

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Mab879 merged 2 commits into from
Apr 23, 2025
Merged

Update CA file path #13328

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
bea4942
Update CA file path
jan-cerny Apr 15, 2025
3207a8d
Promote cafile variable to product property
jan-cerny Apr 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 4 additions & 5 deletions linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_tls_cacert/rule.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,15 +1,14 @@
documentation_complete: true


title: 'Configure CA certificate for rsyslog remote logging'

description: |-
Configure CA certificate for <tt>rsyslog</tt> logging
to remote server using Transport Layer Security (TLS)
using correct path for the <tt>DefaultNetstreamDriverCAFile</tt>
global option in <tt>/etc/rsyslog.conf</tt>, for example with the following command:
<pre>echo 'global(DefaultNetstreamDriverCAFile="/etc/pki/tls/cert.pem")' >> /etc/rsyslog.conf</pre>
Replace the <tt>/etc/pki/tls/cert.pem</tt> in the above command with the path to the file with CA certificate generated for the purpose of remote logging.
<pre>echo 'global(DefaultNetstreamDriverCAFile="{{{ rsyslog_cafile }}}")' >> /etc/rsyslog.conf</pre>
Replace the <tt>{{{ rsyslog_cafile }}}</tt> in the above command with the path to the file with CA certificate generated for the purpose of remote logging.

rationale: |-
The CA certificate needs to be set or <tt>rsyslog.service</tt>
Expand All @@ -36,8 +35,8 @@ ocil: |-
configured for its TLS connections to remote server, run the following command:
<pre>$ grep DefaultNetstreamDriverCAFile /etc/rsyslog.conf /etc/rsyslog.d/*.conf</pre>
The output should include record similar to
<pre>global(DefaultNetstreamDriverCAFile="/etc/pki/tls/cert.pem")</pre>
where the path to the CA file (<tt>/etc/pki/tls/cert.pem</tt> in case above) must point to the correct CA certificate.
<pre>global(DefaultNetstreamDriverCAFile="{{{ rsyslog_cafile }}}")</pre>
where the path to the CA file (<tt>{{{ rsyslog_cafile }}}</tt> in case above) must point to the correct CA certificate.

warnings:
- general: |-
Expand Down
2 changes: 1 addition & 1 deletion ...ogging/rsyslog_sending_messages/rsyslog_remote_tls_cacert/tests/cacert_configured.pass.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
#!/bin/bash

echo 'global(DefaultNetstreamDriverCAFile="/etc/pki/tls/cert.pem")' >> /etc/rsyslog.conf
echo 'global(DefaultNetstreamDriverCAFile="{{{ rsyslog_cafile }}}")' >> /etc/rsyslog.conf
2 changes: 1 addition & 1 deletion ...tem/logging/rsyslog_sending_messages/rsyslog_remote_tls_cacert/tests/syntax_error.fail.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
#!/bin/bash
# remediation = none

echo 'global(DefaultNetstreamDriverCAFile="/etc/pki/tls/cert.pem") *.*' >> /etc/rsyslog.conf
echo 'global(DefaultNetstreamDriverCAFile="{{{ rsyslog_cafile }}}") *.*' >> /etc/rsyslog.conf
1 change: 1 addition & 0 deletions products/fedora/product.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,3 +94,4 @@ platform_package_overrides:
login_defs: "shadow-utils"

journald_conf_dir_path: /etc/systemd/journald.conf.d
rsyslog_cafile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
1 change: 1 addition & 0 deletions products/ol10/product.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,3 +46,4 @@ platform_package_overrides:

reference_uris:
cis: ''
rsyslog_cafile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
1 change: 1 addition & 0 deletions products/rhel10/product.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,3 +53,4 @@ reference_uris:

journald_conf_dir_path: /etc/systemd/journald.conf.d
audit_watches_style: modern
rsyslog_cafile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
1 change: 1 addition & 0 deletions ssg/constants.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -463,6 +463,7 @@
DEFAULT_AIDE_CONF_PATH = '/etc/aide.conf'
DEFAULT_AIDE_BIN_PATH = '/usr/sbin/aide'
DEFAULT_AUDIT_WATCHES_STYLE = 'legacy'
DEFAULT_RSYSLOG_CAFILE = '/etc/pki/tls/cert.pem'
DEFAULT_FAILLOCK_PATH = '/var/run/faillock'
DEFAULT_SSH_DISTRIBUTED_CONFIG = 'false'
DEFAULT_PRODUCT = 'example'
Expand Down
4 changes: 4 additions & 0 deletions ssg/products.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@
DEFAULT_AIDE_CONF_PATH,
DEFAULT_AIDE_BIN_PATH,
DEFAULT_AUDIT_WATCHES_STYLE,
DEFAULT_RSYSLOG_CAFILE,
DEFAULT_SSH_DISTRIBUTED_CONFIG,
DEFAULT_CHRONY_CONF_PATH,
DEFAULT_CHRONY_D_PATH,
Expand Down Expand Up @@ -100,6 +101,9 @@ def _get_implied_properties(existing_properties):
if "audit_watches_style" not in existing_properties:
result["audit_watches_style"] = DEFAULT_AUDIT_WATCHES_STYLE

if "rsyslog_cafile" not in existing_properties:
result["rsyslog_cafile"] = DEFAULT_RSYSLOG_CAFILE

if "sshd_distributed_config" not in existing_properties:
result["sshd_distributed_config"] = DEFAULT_SSH_DISTRIBUTED_CONFIG

Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/alinux2.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,6 +74,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/alinux3.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,6 +74,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/anolis23.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,6 +74,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/anolis8.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,6 +74,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/chromium.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: product
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/debian11.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,6 +83,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/debian12.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,6 +83,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/eks.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81,6 +81,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/example.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,6 +75,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/fedora.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -118,6 +118,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
sshd_distributed_config: 'true'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/firefox.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: product
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ocp4.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -157,6 +157,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ol7.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,6 +86,7 @@ reference_uris:
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
release_key_fingerprint: 42144123FECFC55B9086313D72F97B74EC551F03
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ol8.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -85,6 +85,7 @@ reference_uris:
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
release_key_fingerprint: 76FD3DB13AB67410B89DB10E82562EA9AD986DA3
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ol9.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,6 +89,7 @@ reference_uris:
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
release_key_fingerprint: 3E6D826D3FBAB389C2F38E34BC4D06A08D8B756F
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/openembedded.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,6 +86,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/opensuse.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,6 +86,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/rhcos4.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -79,6 +79,7 @@ reference_uris:
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
2 changes: 1 addition & 1 deletion tests/data/product_stability/rhel10.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,7 @@ reference_uris:
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
rsyslog_cafile: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
sshd_distributed_config: 'true'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand All @@ -96,4 +97,3 @@ xwindows_packages:
- xorg-x11-server-common
- xorg-x11-server-utils
- xorg-x11-server-Xwayland

1 change: 1 addition & 0 deletions tests/data/product_stability/rhel8.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -136,6 +136,7 @@ reference_uris:
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/rhel9.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -93,6 +93,7 @@ reference_uris:
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'true'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/rhv4.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,6 +84,7 @@ reference_uris:
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/sle12.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,6 +84,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'true'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/sle15.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,6 +89,7 @@ reference_uris:
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
release_key_fingerprint: FEAB502539D846DB2C0961CA70AF9E8139DB7C82
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'true'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ubuntu1604.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ubuntu1804.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'false'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ubuntu2004.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -90,6 +90,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'true'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ubuntu2204.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -91,6 +91,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'true'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
1 change: 1 addition & 0 deletions tests/data/product_stability/ubuntu2404.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -92,6 +92,7 @@ reference_uris:
pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
stigref: https://public.cyber.mil/stigs/srg-stig-tools/
rsyslog_cafile: /etc/pki/tls/cert.pem
sshd_distributed_config: 'true'
sysctl_remediate_drop_in_file: 'false'
type: platform
Expand Down
Loading