List view

CCE-88173-0 is <code>notchecked</code> by SSG, however for DISA STIG it <code>fail</code>

blockedIssue that can't be fixed in content.Issue that can't be fixed in content.

productization-issueIssue found in upstream stabilization process.Issue found in upstream stabilization process.

RHEL9Red Hat Enterprise Linux 9 product related.Red Hat Enterprise Linux 9 product related.

STIGSTIG Benchmark related.STIG Benchmark related.

triaged

Status: Open.

#11802 In ComplianceAsCode/content;

· mildas opened on Apr 8, 2024

OCPBUGS-42262: Update command to check the etcd encryption provider being used

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13230

#13230 In ComplianceAsCode/content;

· xiaojiey opened on Mar 25, 2025

Add new build option to generate ansible roles out of profile ansible playbooks

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 13831

#13831 In ComplianceAsCode/content;

· ggbecker opened on Aug 28, 2025

Build reference tables in RHEL9 and RHEL10 and include CCE

Status: Open (in progress).

ComplianceAsCode/contentnumber 13890

#13890 In ComplianceAsCode/content;

· ggbecker opened on Sep 12, 2025

CMP-3385: Update assertion files for 4.16 node scans

Status: Open (in progress).

ComplianceAsCode/contentnumber 13886

#13886 In ComplianceAsCode/content;

· rhmdnd opened on Sep 11, 2025

shared: macros: oval: Fix evr datatype for dpkg-based distros

bugfixFixes to reported bugs.Fixes to reported bugs.

DebianDebian product related.Debian product related.

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

UbuntuUbuntu product related.Ubuntu product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13900

#13900 In ComplianceAsCode/content;

· dodys opened on Sep 16, 2025

CMP-3591: Suppress warnings about file-permissions-proxy-kubeconfig

Status: Open (in progress).

ComplianceAsCode/contentnumber 13894

#13894 In ComplianceAsCode/content;

· rhmdnd opened on Sep 12, 2025

Set OVAL version to 5.11.2 and add option for still building 5.11 and 5.11.1

Status: Open (in progress).

ComplianceAsCode/contentnumber 13918

#13918 In ComplianceAsCode/content;

· dodys opened on Sep 23, 2025

Move ISM O references to the control file

RHELRed Hat Enterprise Linux product related.Red Hat Enterprise Linux product related.

Update ProfileIssues or pull requests related to Profiles updates.Issues or pull requests related to Profiles updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13922

#13922 In ComplianceAsCode/content;

· Mab879 opened on Sep 23, 2025

Remove custom Ansible remediation from service_pcscd_enabled

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13926

#13926 In ComplianceAsCode/content;

· jan-cerny opened on Sep 25, 2025

Make Ansible Tasks in GRUB rules idempotent

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13927

#13927 In ComplianceAsCode/content;

· jan-cerny opened on Sep 25, 2025

Fix grub2_uefi_password tests and shared/grub2

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13929

#13929 In ComplianceAsCode/content;

· alanmcanonical opened on Sep 25, 2025

Assign value to var_accounts_maximum_age_login_defs

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13928

#13928 In ComplianceAsCode/content;

· alanmcanonical opened on Sep 25, 2025

Make Ansible Tasks in postfix rules idempotent

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13930

#13930 In ComplianceAsCode/content;

· jan-cerny opened on Sep 25, 2025

Fix some ansible remediation jinja substitution and remove obsolete code from <code>ensure_redhat_gpgkey_installed</code>

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13931

#13931 In ComplianceAsCode/content;

· ggbecker opened on Sep 25, 2025

Improve ansible remediation of <code>configure_crypto_policy</code>

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13932

#13932 In ComplianceAsCode/content;

· ggbecker opened on Sep 25, 2025

Only run dconf when there is an actual change in previous tasks for dconf gnome ansible remediations

AnsibleAnsible remediation update.Ansible remediation update.

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 13933

#13933 In ComplianceAsCode/content;

· ggbecker opened on Sep 25, 2025

[Ubuntu] Additional fix for rule ensure_root_access_controlled

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

UbuntuUbuntu product related.Ubuntu product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13925

#13925 In ComplianceAsCode/content;

· alanmcanonical opened on Sep 25, 2025

Rework Ansible remediation in accounts_umask_interactive_users

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 13934

#13934 In ComplianceAsCode/content;

· jan-cerny opened on Sep 25, 2025