|
|
|
|
|
|
FAIL DURING OSCAP-ANACONDA INSTALL? |
FAIL AFTER
CLI REMEDIATION? |
|
BugZilla |
| Install AIDE |
X |
FIXED |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372058 |
| Build and Test AIDE Database |
X |
FIXED |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372058 |
| Configure Periodic Execution of AIDE |
X |
FIXED |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372058 |
| Install Virus Scanning Software |
X |
X |
|
Acceptable - DoD specific |
| Enable Randomized Layout of Virtual Address
Space |
X |
ERROR |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372060 |
| Set Password to Maximum of Consecutive Repeating
Characters from Same Character Class |
X |
X |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372061 |
| Set Interactive Session Timeout |
X |
X |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372062 |
| Set Boot Loader Password |
X |
X |
|
Acceptable - user needs to input password
|
| Install the screen Package |
X |
|
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372066 |
| Configure Kernel Parameter for Accepting
Source-Routed Packets for All Interfaces |
X |
X |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372063 |
| Ensure Logs Sent to Remote Host |
X |
X |
|
Acceptable - user must input |
| Disable GSSAPI Authentication |
X |
X |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372068 |
| Disable Kerberos Authentication |
X |
X |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372068 |
| Enable Use of StrictModes |
X |
X |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372068 |
| Enable Use of Privilege Separation |
X |
X |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372068 |
| Disable Compression or Set Compression to
delayed |
X |
X |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372068 |
| Verify Permissions on SSH Server Private *_key
Key Files |
X |
X |
|
https://bugzilla.redhat.com/show_bug.cgi?id=1372070 |