Update role to STIG version 1, release 17

Question

Update role to STIG version 1, release 17

shepdelacreme opened this issue 7 years ago · 3 comments

shepdelacreme commented 7 years ago

DISA published v1R17: https://iasecontent.disa.mil/stigs/zip/U_RedHat_6_V1R17_STIG.zip

Answer 1 · 2017-11-01T15:51:52.000Z

Looks like only a single update needed. Other changed items don't affect this role.
Updates needed:

V-38666 modified from a CAT 1 to a CAT 2 finding. Following code needs to be moved to CAT 2 file.
https://github.com/MindPointGroup/RHEL6-STIG/blob/e4e266f725a3e6afff67428c1d44f482273ac529/tasks/cat1.yml#L211-L230

Answer 2 · 2018-04-16T21:05:13.000Z

V1R18 came out in January.

Answer 3 · 2018-04-17T13:04:00.000Z

V1R18 is a no-op as far as this role is concerned. It updates wording for how to check 'rpm -V' output, and switches from checking on-disk firewall configuration to checking in-memory firewall configuration.