{"action":"created","issue":{"url":"https://api.github.com/repos/djhaynes/inspec-profile-disa_stig-el7/issues/28","repository_url":"https://api.github.com/repos/djhaynes/inspec-profile-disa_stig-el7","labels_url":"https://api.github.com/repos/djhaynes/inspec-profile-disa_stig-el7/issues/28/labels{/name}","comments_url":"https://api.github.com/repos/djhaynes/inspec-profile-disa_stig-el7/issues/28/comments","events_url":"https://api.github.com/repos/djhaynes/inspec-profile-disa_stig-el7/issues/28/events","html_url":"https://github.com/djhaynes/inspec-profile-disa_stig-el7/issues/28","id":318483208,"number":28,"title":"aide controls overly strict","user":{"login":"samcornwell","id":14048146,"avatar_url":"https://avatars2.githubusercontent.com/u/14048146?v=4","gravatar_id":"","url":"https://api.github.com/users/samcornwell","html_url":"https://github.com/samcornwell","followers_url":"https://api.github.com/users/samcornwell/followers","following_url":"https://api.github.com/users/samcornwell/following{/other_user}","gists_url":"https://api.github.com/users/samcornwell/gists{/gist_id}","starred_url":"https://api.github.com/users/samcornwell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/samcornwell/subscriptions","organizations_url":"https://api.github.com/users/samcornwell/orgs","repos_url":"https://api.github.com/users/samcornwell/repos","events_url":"https://api.github.com/users/samcornwell/events{/privacy}","received_events_url":"https://api.github.com/users/samcornwell/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-04-27T17:06:37Z","updated_at":"2018-05-16T15:17:50Z","closed_at":"2018-05-16T15:17:50Z","author_association":"COLLABORATOR","body":"Controls V-72069, V-72071, V-72073 are overly strict in two ways:\r\n\r\n1) The inspec aide_conf resource has an `all_have_rule` function that checks that all selection lines contain a given rule ('sha512', 'xattrs', 'acl' are the rules checked by these controls).  The logic of this function considers all selection lines, including ones that begin with `!` (negative selections) which are used to exclude certain files/directories from inspection.  Negative selections do not have rules, so in the event that any are used, then all uses of `all_have_rule` will fail for all possible arguments.\r\n\r\n2) It is not reasonable that all file types should be monitored with all these rules. For example, some files (such as logs) are expected to change regularly.  For these files, it may make sense to use the 'xattrs' and 'acl' rules, but not 'sha512'."},"comment":{"url":"https://api.github.com/repos/djhaynes/inspec-profile-disa_stig-el7/issues/comments/389557307","html_url":"https://github.com/djhaynes/inspec-profile-disa_stig-el7/issues/28#issuecomment-389557307","issue_url":"https://api.github.com/repos/djhaynes/inspec-profile-disa_stig-el7/issues/28","id":389557307,"user":{"login":"samcornwell","id":14048146,"avatar_url":"https://avatars2.githubusercontent.com/u/14048146?v=4","gravatar_id":"","url":"https://api.github.com/users/samcornwell","html_url":"https://github.com/samcornwell","followers_url":"https://api.github.com/users/samcornwell/followers","following_url":"https://api.github.com/users/samcornwell/following{/other_user}","gists_url":"https://api.github.com/users/samcornwell/gists{/gist_id}","starred_url":"https://api.github.com/users/samcornwell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/samcornwell/subscriptions","organizations_url":"https://api.github.com/users/samcornwell/orgs","repos_url":"https://api.github.com/users/samcornwell/repos","events_url":"https://api.github.com/users/samcornwell/events{/privacy}","received_events_url":"https://api.github.com/users/samcornwell/received_events","type":"User","site_admin":false},"created_at":"2018-05-16T15:17:50Z","updated_at":"2018-05-16T15:17:50Z","author_association":"COLLABORATOR","body":"Part 1 fixed with a workaround in https://github.com/djhaynes/inspec-profile-disa_stig-el7/commit/d32af20604f4a4d37381e4e414ba8aff7962e4a2\r\n\r\nPart 2 documented in #35 "}}
{"actor":{"display_login":"samcornwell"}}