Bug 1703092

Summary:	Rules have same CCE identifier assigned to
Product:	Red Hat Enterprise Linux 7	Reporter:	Gabriel Gaspar Becker <ggasparb>
Component:	scap-security-guide	Assignee:	Gabriel Gaspar Becker <ggasparb>
Status:	CLOSED ERRATA	QA Contact:	Matus Marhefka <mmarhefk>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	7.6	CC:	ggasparb, mhaicman, openscap-maint, wsato
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	scap-security-guide-0.1.43-6.el7	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-08-06 13:04:28 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Gabriel Gaspar Becker 2019-04-25 13:39:57 UTC

Description of problem:
Common Configuration Enumeration (CCE) is supposed to be a unique identifier, but some rules in the datastream have the same number assigned to.

Here is the list of rules and their CCE numbers:

----Following rules have the same CCE assigned to. (CCE-80382-5)----
file_permissions_httpd_server_modules_files
audit_rules_login_events_tallylog
----Following rules have the same CCE assigned to. (CCE-27206-2)----
audit_rules_file_deletion_events
audit_rules_file_deletion_events_rename
audit_rules_file_deletion_events_unlink
----Following rules have the same CCE assigned to. (CCE-80381-7)----
file_permissions_httpd_server_conf_d_files
audit_rules_system_shutdown
----Following rules have the same CCE assigned to. (CCE-27361-5)----
package_tcp_wrappers_installed
service_firewalld_enabled
----Following rules have the same CCE assigned to. (CCE-80156-3)----
sysctl_net_ipv4_conf_all_send_redirects
sysctl_net_ipv4_conf_default_send_redirects
----Following rules have the same CCE assigned to. (CCE-27498-5)----
account_temp_expire_date
service_autofs_disabled


Version-Release number of selected component (if applicable):
scap-security-guide-0.1.40-12.el7

How reproducible:
100%

Steps to Reproduce:
1. vim /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml
2. Search CCE-80382-5
3.

Actual results:
Two rules have the same CCE assigned to

Expected results:
Only one rule have the CCE assigned to

Additional info:

Comment 2 Gabriel Gaspar Becker 2019-04-25 13:46:28 UTC

Upstream patch:

https://github.com/ComplianceAsCode/content/pull/4278

Comment 6 Watson Yuuma Sato 2019-05-10 14:55:25 UTC

The second patch for duplicated CCEs was applied.

Comment 9 errata-xmlrpc 2019-08-06 13:04:28 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2198