I believe that the logon banner text is incorrect in the open-scap. The part is issue is this line:
-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
There are no spaces around the double-dash. A common error is to put spaces there. The text is correct at this link, which should be publically accessible. https://iase.disa.mil/Documents/unclass-consent_banner.zip
This affects RHEL-07-010030, plus checks such as RHEL-07-010050. Incidentally, the banner text in the Red Hat Enterprise Linux 7 Security Technical Implementation Guide :: Release: 2 Benchmark Date: 28 Jul 2017 ha the correct text in the check content, but not in the fix text. Even DISA has issues keeping it straight.
David Paige, CISSP USAICoE CIO/G6, Contractor Sr. Systems Engineer II 520-533-6213 david.b.paige.ctr@mail.mil
On 8/1/17 12:26 PM, Paige, David B CTR USARMY ICOE (US) wrote:
I believe that the logon banner text is incorrect in the open-scap. The part is issue is this line:
-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
There are no spaces around the double-dash. A common error is to put spaces there. The text is correct at this link, which should be publically accessible. https://iase.disa.mil/Documents/unclass-consent_banner.zip
This affects RHEL-07-010030, plus checks such as RHEL-07-010050. Incidentally, the banner text in the Red Hat Enterprise Linux 7 Security Technical Implementation Guide :: Release: 2 Benchmark Date: 28 Jul 2017 ha the correct text in the check content, but not in the fix text. Even DISA has issues keeping it straight.
Thanks for reporting this!
Submitted a bugfix to SSG content: https://github.com/OpenSCAP/scap-security-guide/pull/2200
scap-security-guide@lists.fedorahosted.org