Project

General

Profile

Actions
Copy link

Bug #27847

open

CIS RHEL 9 Section 6.1.3 : Incorrect path harcoded in our test, may vary on actual target systems

Bug #27847: CIS RHEL 9 Section 6.1.3 : Incorrect path harcoded in our test, may vary on actual target systems

Added by Michel BOUISSOU 10 days ago. Updated 1 day ago.

Status:
Pending technical review
Priority:
1 (highest)
Assignee:
Nicolas CHARLES
Target version:
Rudder plugins - 9.0
Pull Request:
https://github.com/Normation/rudder-p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

All of our tests for 6.1.3 check for an hardcoded « /sbin » path in /etc/aide.conf

However the CIS benchmark specifically tells to check the actual path for corresponding utilities, which can be either /bin/ or /usr/sbin/

In Alma 9 (thus most probably in RHEL9 as well), /sbin/ is a symlink -> /usr/sbin/, plain /sbin/ tending to be deprecated on most Linux distros.

Our tests should either determine which the actual correct path is, or hardcode /usr/bin/ instead of /sbin/, as /usr/bin/ is the real path on RH 9 (but might not be on nodes upgraded to RH 9 from previous, older RH versions).

Updated by Michel BOUISSOU 10 days ago Actions
Copy link
 #1

  • Status changed from New to In progress
  • Assignee set to Michel BOUISSOU

Updated by Michel BOUISSOU 10 days ago Actions
Copy link
 #2

  • Status changed from In progress to Pending technical review
  • Assignee changed from Michel BOUISSOU to Nicolas CHARLES
  • Pull Request set to https://github.com/Normation/rudder-plugins-private/pull/1235

Updated by Nicolas CHARLES 1 day ago Actions
Copy link
 #3

  • Priority changed from To review to 1 (highest)
Actions
Copy link

Also available in: PDF Atom