Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RHEL-08-010162 removing krb5-workstation despite being version-compliant #11750

Open
GitYukari opened this issue Mar 24, 2024 · 0 comments
Open
Labels
RHEL Red Hat Enterprise Linux product related. STIG STIG Benchmark related.

Comments

@GitYukari
Copy link

GitYukari commented Mar 24, 2024

Description of problem:

https://www.stigviewer.com/stig/red_hat_enterprise_linux_8/2023-09-11/finding/V-230239

The above STIG states that the krb5-workstation package must not be installed on RHEL 8. However, it states in the check text:

If the system is a server or is utilizing krb5-workstation-1.17-18.el8.x86_64 or newer, this is Not Applicable.

The current implementation of this STIG for RHEL 8, and possibly other operating systems, is only checking the presence of krb5-workstation, and not the version. This is resulting in the removal of the package, even if it is compliant with the STIG. Obviously, this breaks Kerberos authentication.

The current version for RHEL 8 is 1.18.2-26. The required minimum version is 1.17-18. This check should mark this condition NA

@Mab879 Mab879 added RHEL Red Hat Enterprise Linux product related. STIG STIG Benchmark related. labels Mar 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
RHEL Red Hat Enterprise Linux product related. STIG STIG Benchmark related.
Projects
None yet
Development

No branches or pull requests

2 participants