Hi Team,

 

 

I have applied the PCI-DSS profile to my Centos 7 system and there seems to be a false positive with the check “Disable Prelinking”.  I have checked the Remediation steps and they have been applied but check still marks as a fail.   Secondly with this PCI profile how come Rules like enabling or checking SELinux are marked as notselected. Are these notselected rules not part of PCI-DSS requirements or is this due to some other reason.

 

 

Benchmark URL

ssg-centos7-ds.xml

 

Benchmark ID

xccdf_org.ssgproject.content_benchmark_RHEL-7

 

Profile ID

xccdf_org.ssgproject.content_profile_pci-dss

 

 

 

 

 

Colin Madigan|UNIX Engineer

T02 9344 2705

30 Ross St, Glebe NSW 2037

Colin.Madigan@tpgtelecom.com.au                                                                                                             

 

TPG Telecom (ASX: TPM)

 

Description: http://res.tpgi.com.au/img/signature/tpglogo.jpg

 

 

This email and any attachments are confidential and may be subject to copyright, legal or some other professional privilege. They are intended solely for the attention and use of the named addressee(s). They may only be copied, distributed or disclosed with the consent of the copyright owner. If you have received this email by mistake or by breach of the confidentiality clause, please notify the sender immediately by return email and delete or destroy all copies of the email. Any confidentiality, privilege or copyright is not waived or lost because this email has been sent to you by mistake.

 

Confidentiality: This email and any attachments are confidential and may be subject to copyright, legal or some other professional privilege. They are intended solely for the attention and use of the named addressee(s). They may only be copied, distributed or disclosed with the consent of the copyright owner. If you have received this email by mistake or by breach of the confidentiality clause, please notify the sender immediately by return email and delete or destroy all copies of the email. Any confidentiality, privilege or copyright is not waived or lost because this email has been sent to you by mistake.