Skip to content

Commit 71825a7

Browse files
jan-cernyjan-cerny
committed
Update product stability data
1 parent 516b889 commit 71825a7

26 files changed

+556
-192
lines changed

‎tests/data/product_stability/alinux2.yml‎

Lines changed: 21 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,16 @@ aide_bin_path: /usr/sbin/aide
44
aide_conf_path: /etc/aide.conf
55
audisp_conf_path: /etc/audit
66
audit_binaries:
7-
- /sbin/auditctl
8-
- /sbin/aureport
9-
- /sbin/ausearch
10-
- /sbin/autrace
11-
- /sbin/auditd
12-
- /sbin/audispd
13-
- /sbin/augenrules
7+
- /sbin/auditctl
8+
- /sbin/aureport
9+
- /sbin/ausearch
10+
- /sbin/autrace
11+
- /sbin/auditd
12+
- /sbin/audispd
13+
- /sbin/augenrules
1414
audit_watches_style: legacy
1515
auid: 1000
16+
base_policy: DEFAULT:NO-SHA1
1617
basic_properties_derived: true
1718
benchmark_id: ALINUX-2
1819
benchmark_root: ../../linux_os/guide
@@ -85,6 +86,19 @@ reference_uris:
8586
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
8687
rsyslog_cafile: /etc/pki/tls/cert.pem
8788
sshd_distributed_config: 'false'
89+
sub_policies:
90+
NO-SSHCBC:
91+
key: cipher@SSH
92+
value: -*-CBC
93+
NO-SSHWEAKCIPHERS:
94+
key: cipher@SSH
95+
value: -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC -CHACHA20-POLY1305
96+
NO-SSHWEAKMACS:
97+
key: mac@SSH
98+
value: -HMAC-MD5* -UMAC-64* -UMAC-128*
99+
NO-WEAKMAC:
100+
key: mac
101+
value: -*-128*
88102
sysctl_remediate_drop_in_file: 'false'
89103
target_oval_version:
90104
- 5

‎tests/data/product_stability/alinux3.yml‎

Lines changed: 21 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,16 @@ aide_bin_path: /usr/sbin/aide
44
aide_conf_path: /etc/aide.conf
55
audisp_conf_path: /etc/audit
66
audit_binaries:
7-
- /sbin/auditctl
8-
- /sbin/aureport
9-
- /sbin/ausearch
10-
- /sbin/autrace
11-
- /sbin/auditd
12-
- /sbin/audispd
13-
- /sbin/augenrules
7+
- /sbin/auditctl
8+
- /sbin/aureport
9+
- /sbin/ausearch
10+
- /sbin/autrace
11+
- /sbin/auditd
12+
- /sbin/audispd
13+
- /sbin/augenrules
1414
audit_watches_style: legacy
1515
auid: 1000
16+
base_policy: DEFAULT:NO-SHA1
1617
basic_properties_derived: true
1718
benchmark_id: ALINUX-3
1819
benchmark_root: ../../linux_os/guide
@@ -85,6 +86,19 @@ reference_uris:
8586
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
8687
rsyslog_cafile: /etc/pki/tls/cert.pem
8788
sshd_distributed_config: 'false'
89+
sub_policies:
90+
NO-SSHCBC:
91+
key: cipher@SSH
92+
value: -*-CBC
93+
NO-SSHWEAKCIPHERS:
94+
key: cipher@SSH
95+
value: -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC -CHACHA20-POLY1305
96+
NO-SSHWEAKMACS:
97+
key: mac@SSH
98+
value: -HMAC-MD5* -UMAC-64* -UMAC-128*
99+
NO-WEAKMAC:
100+
key: mac
101+
value: -*-128*
88102
sysctl_remediate_drop_in_file: 'false'
89103
target_oval_version:
90104
- 5

‎tests/data/product_stability/anolis23.yml‎

Lines changed: 20 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,14 +4,15 @@ aide_bin_path: /usr/sbin/aide
44
aide_conf_path: /etc/aide.conf
55
audisp_conf_path: /etc/audit
66
audit_binaries:
7-
- /sbin/auditctl
8-
- /sbin/aureport
9-
- /sbin/ausearch
10-
- /sbin/autrace
11-
- /sbin/auditd
12-
- /sbin/augenrules
7+
- /sbin/auditctl
8+
- /sbin/aureport
9+
- /sbin/ausearch
10+
- /sbin/autrace
11+
- /sbin/auditd
12+
- /sbin/augenrules
1313
audit_watches_style: legacy
1414
auid: 1000
15+
base_policy: DEFAULT:NO-SHA1
1516
basic_properties_derived: true
1617
benchmark_id: ANOLIS-23
1718
benchmark_root: ../../linux_os/guide
@@ -84,6 +85,19 @@ reference_uris:
8485
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
8586
rsyslog_cafile: /etc/pki/tls/cert.pem
8687
sshd_distributed_config: 'false'
88+
sub_policies:
89+
NO-SSHCBC:
90+
key: cipher@SSH
91+
value: -*-CBC
92+
NO-SSHWEAKCIPHERS:
93+
key: cipher@SSH
94+
value: -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC -CHACHA20-POLY1305
95+
NO-SSHWEAKMACS:
96+
key: mac@SSH
97+
value: -HMAC-MD5* -UMAC-64* -UMAC-128*
98+
NO-WEAKMAC:
99+
key: mac
100+
value: -*-128*
87101
sysctl_remediate_drop_in_file: 'false'
88102
target_oval_version:
89103
- 5

‎tests/data/product_stability/anolis8.yml‎

Lines changed: 20 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,14 +4,15 @@ aide_bin_path: /usr/sbin/aide
44
aide_conf_path: /etc/aide.conf
55
audisp_conf_path: /etc/audit
66
audit_binaries:
7-
- /sbin/auditctl
8-
- /sbin/aureport
9-
- /sbin/ausearch
10-
- /sbin/autrace
11-
- /sbin/auditd
12-
- /sbin/augenrules
7+
- /sbin/auditctl
8+
- /sbin/aureport
9+
- /sbin/ausearch
10+
- /sbin/autrace
11+
- /sbin/auditd
12+
- /sbin/augenrules
1313
audit_watches_style: legacy
1414
auid: 1000
15+
base_policy: DEFAULT:NO-SHA1
1516
basic_properties_derived: true
1617
benchmark_id: ANOLIS-8
1718
benchmark_root: ../../linux_os/guide
@@ -84,6 +85,19 @@ reference_uris:
8485
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
8586
rsyslog_cafile: /etc/pki/tls/cert.pem
8687
sshd_distributed_config: 'false'
88+
sub_policies:
89+
NO-SSHCBC:
90+
key: cipher@SSH
91+
value: -*-CBC
92+
NO-SSHWEAKCIPHERS:
93+
key: cipher@SSH
94+
value: -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC -CHACHA20-POLY1305
95+
NO-SSHWEAKMACS:
96+
key: mac@SSH
97+
value: -HMAC-MD5* -UMAC-64* -UMAC-128*
98+
NO-WEAKMAC:
99+
key: mac
100+
value: -*-128*
87101
sysctl_remediate_drop_in_file: 'false'
88102
target_oval_version:
89103
- 5

‎tests/data/product_stability/debian11.yml‎

Lines changed: 21 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,16 @@ aide_bin_path: /usr/sbin/aide
44
aide_conf_path: /etc/aide.conf
55
audisp_conf_path: /etc/audit
66
audit_binaries:
7-
- /sbin/auditctl
8-
- /sbin/aureport
9-
- /sbin/ausearch
10-
- /sbin/autrace
11-
- /sbin/auditd
12-
- /sbin/audispd
13-
- /sbin/augenrules
7+
- /sbin/auditctl
8+
- /sbin/aureport
9+
- /sbin/ausearch
10+
- /sbin/autrace
11+
- /sbin/auditd
12+
- /sbin/audispd
13+
- /sbin/augenrules
1414
audit_watches_style: legacy
1515
auid: 1000
16+
base_policy: DEFAULT:NO-SHA1
1617
basic_properties_derived: true
1718
benchmark_id: DEBIAN-11
1819
benchmark_root: ../../linux_os/guide
@@ -94,6 +95,19 @@ reference_uris:
9495
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
9596
rsyslog_cafile: /etc/pki/tls/cert.pem
9697
sshd_distributed_config: 'false'
98+
sub_policies:
99+
NO-SSHCBC:
100+
key: cipher@SSH
101+
value: -*-CBC
102+
NO-SSHWEAKCIPHERS:
103+
key: cipher@SSH
104+
value: -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC -CHACHA20-POLY1305
105+
NO-SSHWEAKMACS:
106+
key: mac@SSH
107+
value: -HMAC-MD5* -UMAC-64* -UMAC-128*
108+
NO-WEAKMAC:
109+
key: mac
110+
value: -*-128*
97111
sysctl_remediate_drop_in_file: 'false'
98112
target_oval_version:
99113
- 5

‎tests/data/product_stability/debian12.yml‎

Lines changed: 21 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,16 @@ aide_bin_path: /usr/sbin/aide
44
aide_conf_path: /etc/aide/aide.conf
55
audisp_conf_path: /etc/audit
66
audit_binaries:
7-
- /sbin/auditctl
8-
- /sbin/aureport
9-
- /sbin/ausearch
10-
- /sbin/autrace
11-
- /sbin/auditd
12-
- /sbin/audispd
13-
- /sbin/augenrules
7+
- /sbin/auditctl
8+
- /sbin/aureport
9+
- /sbin/ausearch
10+
- /sbin/autrace
11+
- /sbin/auditd
12+
- /sbin/audispd
13+
- /sbin/augenrules
1414
audit_watches_style: legacy
1515
auid: 1000
16+
base_policy: DEFAULT:NO-SHA1
1617
basic_properties_derived: true
1718
benchmark_id: DEBIAN-12
1819
benchmark_root: ../../linux_os/guide
@@ -95,6 +96,19 @@ reference_uris:
9596
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
9697
rsyslog_cafile: /etc/pki/tls/cert.pem
9798
sshd_distributed_config: 'false'
99+
sub_policies:
100+
NO-SSHCBC:
101+
key: cipher@SSH
102+
value: -*-CBC
103+
NO-SSHWEAKCIPHERS:
104+
key: cipher@SSH
105+
value: -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC -CHACHA20-POLY1305
106+
NO-SSHWEAKMACS:
107+
key: mac@SSH
108+
value: -HMAC-MD5* -UMAC-64* -UMAC-128*
109+
NO-WEAKMAC:
110+
key: mac
111+
value: -*-128*
98112
sysctl_remediate_drop_in_file: 'false'
99113
target_oval_version:
100114
- 5

‎tests/data/product_stability/debian13.yml‎

Lines changed: 21 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,16 @@ aide_bin_path: /usr/sbin/aide
44
aide_conf_path: /etc/aide/aide.conf
55
audisp_conf_path: /etc/audit
66
audit_binaries:
7-
- /sbin/auditctl
8-
- /sbin/aureport
9-
- /sbin/ausearch
10-
- /sbin/autrace
11-
- /sbin/auditd
12-
- /sbin/audispd
13-
- /sbin/augenrules
7+
- /sbin/auditctl
8+
- /sbin/aureport
9+
- /sbin/ausearch
10+
- /sbin/autrace
11+
- /sbin/auditd
12+
- /sbin/audispd
13+
- /sbin/augenrules
1414
audit_watches_style: legacy
1515
auid: 1000
16+
base_policy: DEFAULT:NO-SHA1
1617
basic_properties_derived: true
1718
benchmark_id: DEBIAN-13
1819
benchmark_root: ../../linux_os/guide
@@ -95,6 +96,19 @@ reference_uris:
9596
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
9697
rsyslog_cafile: /etc/pki/tls/cert.pem
9798
sshd_distributed_config: 'false'
99+
sub_policies:
100+
NO-SSHCBC:
101+
key: cipher@SSH
102+
value: -*-CBC
103+
NO-SSHWEAKCIPHERS:
104+
key: cipher@SSH
105+
value: -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC -CHACHA20-POLY1305
106+
NO-SSHWEAKMACS:
107+
key: mac@SSH
108+
value: -HMAC-MD5* -UMAC-64* -UMAC-128*
109+
NO-WEAKMAC:
110+
key: mac
111+
value: -*-128*
98112
sysctl_remediate_drop_in_file: 'false'
99113
target_oval_version:
100114
- 5

‎tests/data/product_stability/eks.yml‎

Lines changed: 21 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,16 @@ aide_bin_path: /usr/sbin/aide
44
aide_conf_path: /etc/aide.conf
55
audisp_conf_path: /etc/audit
66
audit_binaries:
7-
- /sbin/auditctl
8-
- /sbin/aureport
9-
- /sbin/ausearch
10-
- /sbin/autrace
11-
- /sbin/auditd
12-
- /sbin/audispd
13-
- /sbin/augenrules
7+
- /sbin/auditctl
8+
- /sbin/aureport
9+
- /sbin/ausearch
10+
- /sbin/autrace
11+
- /sbin/auditd
12+
- /sbin/audispd
13+
- /sbin/augenrules
1414
audit_watches_style: legacy
1515
auid: 1000
16+
base_policy: DEFAULT:NO-SHA1
1617
basic_properties_derived: true
1718
benchmark_id: EKS
1819
benchmark_root: ../../applications
@@ -92,6 +93,19 @@ reference_uris:
9293
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
9394
rsyslog_cafile: /etc/pki/tls/cert.pem
9495
sshd_distributed_config: 'false'
96+
sub_policies:
97+
NO-SSHCBC:
98+
key: cipher@SSH
99+
value: -*-CBC
100+
NO-SSHWEAKCIPHERS:
101+
key: cipher@SSH
102+
value: -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC -CHACHA20-POLY1305
103+
NO-SSHWEAKMACS:
104+
key: mac@SSH
105+
value: -HMAC-MD5* -UMAC-64* -UMAC-128*
106+
NO-WEAKMAC:
107+
key: mac
108+
value: -*-128*
95109
sysctl_remediate_drop_in_file: 'false'
96110
target_oval_version:
97111
- 5

‎tests/data/product_stability/example.yml‎

Lines changed: 21 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,16 @@ aide_bin_path: /usr/sbin/aide
44
aide_conf_path: /etc/aide.conf
55
audisp_conf_path: /etc/audit
66
audit_binaries:
7-
- /sbin/auditctl
8-
- /sbin/aureport
9-
- /sbin/ausearch
10-
- /sbin/autrace
11-
- /sbin/auditd
12-
- /sbin/audispd
13-
- /sbin/augenrules
7+
- /sbin/auditctl
8+
- /sbin/aureport
9+
- /sbin/ausearch
10+
- /sbin/autrace
11+
- /sbin/auditd
12+
- /sbin/audispd
13+
- /sbin/augenrules
1414
audit_watches_style: legacy
1515
auid: 1000
16+
base_policy: DEFAULT:NO-SHA1
1617
basic_properties_derived: true
1718
benchmark_id: EXAMPLE
1819
benchmark_root: ../../linux_os/guide
@@ -86,6 +87,19 @@ reference_uris:
8687
stigref: https://www.cyber.mil/stigs/srg-stig-tools/
8788
rsyslog_cafile: /etc/pki/tls/cert.pem
8889
sshd_distributed_config: 'false'
90+
sub_policies:
91+
NO-SSHCBC:
92+
key: cipher@SSH
93+
value: -*-CBC
94+
NO-SSHWEAKCIPHERS:
95+
key: cipher@SSH
96+
value: -3DES-CBC -AES-128-CBC -AES-192-CBC -AES-256-CBC -CHACHA20-POLY1305
97+
NO-SSHWEAKMACS:
98+
key: mac@SSH
99+
value: -HMAC-MD5* -UMAC-64* -UMAC-128*
100+
NO-WEAKMAC:
101+
key: mac
102+
value: -*-128*
89103
sysctl_remediate_drop_in_file: 'false'
90104
target_oval_version:
91105
- 5

0 commit comments

Comments
 (0)