Hi Team,
I have applied the PCI-DSS profile to my Centos 7 system and there seems to be a false
positive with the check "Disable Prelinking". I have checked the Remediation
steps and they have been applied but check still marks as a fail. Secondly with this PCI
profile how come Rules like enabling or checking SELinux are marked as notselected. Are
these notselected rules not part of PCI-DSS requirements or is this due to some other
reason.
Benchmark URL
ssg-centos7-ds.xml
Benchmark ID
xccdf_org.ssgproject.content_benchmark_RHEL-7
Profile ID
xccdf_org.ssgproject.content_profile_pci-dss
[cid:image002.png@01D2F011.BA7425D0]
Colin Madigan|UNIX Engineer
T02 9344 2705
30 Ross St, Glebe NSW 2037
Colin.Madigan@tpgtelecom.com.au<mailto:Colin.Madigan@tpgtelecom.com.au>
TPG Telecom (ASX: TPM)
[Description:
http://res.tpgi.com.au/img/signature/tpglogo.jpg]
This email and any attachments are confidential and may be subject to copyright, legal or
some other professional privilege. They are intended solely for the attention and use of
the named addressee(s). They may only be copied, distributed or disclosed with the consent
of the copyright owner. If you have received this email by mistake or by breach of the
confidentiality clause, please notify the sender immediately by return email and delete or
destroy all copies of the email. Any confidentiality, privilege or copyright is not waived
or lost because this email has been sent to you by mistake.
Confidentiality: This email and any attachments are confidential and may be subject to
copyright, legal or some other professional privilege. They are intended solely for the
attention and use of the named addressee(s). They may only be copied, distributed or
disclosed with the consent of the copyright owner. If you have received this email by
mistake or by breach of the confidentiality clause, please notify the sender immediately
by return email and delete or destroy all copies of the email. Any confidentiality,
privilege or copyright is not waived or lost because this email has been sent to you by
mistake.