|
|
Reporter | Stephan Ellis | Assigned To | | |
---|
Priority | normal | Severity | minor | Reproducibility | always |
---|
Status | new | Resolution | open | |
---|
Platform | x84_64 | OS | Rocky Linux | OS Version | 8.7 |
---|
|
|
Summary | 0002245: CUI Securirty Profile will pass evaluation |
---|
Description | When applying the security profile for NIST 800-171, everything works as expected except for two components. Producing an html report using the oscap tool, you will see that it's failing on the FIPS crypto policy settings and the chrony settings. Checking those settings by hand reveals that they are correct, but the profile evalutaion says they are not. |
---|
Steps To Reproduce | Install Rocky linux with the recommended partition scheme, using the Server software selection and the NIST 800-171 security profile. After install, run updates and then run fips-mode-setup --enable and restart. Then run oscap tool using the ssg-rl8-ds.xml scap content and the "cui" profile. |
---|
Tags | No tags attached. |
---|
|
|