hubblestack/nova

CIS CentOS 6 - CIS-6.2.12

Closed this issue · 2 comments

This objective per the documentation is site specific policy... they offer the recommendation but once again advise it should be site specific. With that said the current rule is binary as it must meet the recommendation listed to passed.

This seems like it would be best addressed with idea #123

Screenshot of Documentation
selection_012

I feel like the default CIS nova profile should probably provide an audit using the recommended settings. I anticipate most people will fork this repo and then make small tweaks for their site-specific settings, or use a control config to just ignore that failure.

Not sure how #123 would solve this.

Since I haven't heard from you in awhile, I'm going to close this for now.