home.social

#amazonlinux — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #amazonlinux, aggregated by home.social.

  1. Fucking #Amazon (#AWS)…

    So, I'm in the midst of writing supplemental automation to take care of site-specific remediation of STIG-hardening guidance for RPM-based
    #linux distros. Across all of my employers' customers, we support Red Hat and Oracle Enterprise Linux 8 & 9, @[email protected] and @[email protected] 9, CentOS Stream 9 and Amazon Linux 2023.

    One of the remediations I was working on, today, was one that exists for all of the above named distros. Generally, when I have the
    STIG-Viewer open (I still use the 2.x one because the 3.x one is hot garbage), I use the search capability to limit the displayed findings to just the ones I'm currently working on. I also tend to prefer to use the longest possible string to match for the rule-text. Doing so avoids displaying findings I'm not interested in (just because they each reference, say, "auditd").

    At any rate, I type in the string:

    must encrypt the transfer of audit records
    Four hits. I then copy the rule rule-title from the #RHEL finding. The view reduces to three hits. Since I'd reviewed the previous four hits and seen that there was one each for RHEL, #OEL, #AlmaLinux and #AmazonLinux, I was confused why typing the longer string had reduced my number of hits. Specifically, it had removed the #AmazonLinux2023 finding.

    So, I returned to the shorter filter string. I compared the RHEL and
    #AL2023 rule text strings.

    RHEL/OEL/Alma:
    must encrypt the transfer of audit records offloaded onto a different system or media from the system being audited via rsyslog
    AL2023:
    must encrypt the transfer of audit records off-loaded onto a different system or media from the system being audited via rsyslog.
    And all I could think was, "are you fucking kidding me???"

    #RedHat
    #Oracle
    #RockyLinux