Skip to content

Remove DoD-specific verbiage from rule.yml files#14834

Open
Tomatotech90 wants to merge 1 commit into
ComplianceAsCode:masterfrom
Tomatotech90:fix-dod-verbiage-rule-yml
Open

Remove DoD-specific verbiage from rule.yml files#14834
Tomatotech90 wants to merge 1 commit into
ComplianceAsCode:masterfrom
Tomatotech90:fix-dod-verbiage-rule-yml

Conversation

@Tomatotech90

Copy link
Copy Markdown

Several rule.yml files described generic security requirements using DoD-specific phrasing, making the content appear policy-specific even when the underlying requirement applies to any organization.

Replace the DoD-framed audit event capability description in three SELinux audit rules (semanage, setfiles, setsebool) with generic language. Remove the named DoD form reference in httpd_antivirus_scan_uploads, and remove the named product and government contact URL from the install_hids warning block.

Also fix a pre-existing trailing whitespace on line 30 of audit_rules_execution_semanage/rule.yml, found during lint verification of the same file.

Note: mcafee_security_software/group.yml was reviewed but excluded from this PR. Its DoD-specific content is the entire substance of the rule, not incidental wording.

Resolves: #8709

Description:

  • Description here. Replace this text. Don't use the italics format!

Rationale:

  • Rationale here. Replace this text. Don't use the italics format!

  • Fixes # Issue number here (e.g. Updating sysctl XCCDF naming #26) or remove this line if no issue exists.

Review Hints:

  • Review hints here. Replace this text. Don't use the italics format!

  • Use this optional section to give any relevant information which could help the reviewer to more quickly and assertively understand and test the changes.

  • Good examples are useful commands, if it is better to review all commits together or in a suggested sequence, any relevant discussion in other PRs or issues, etc.

Several rule.yml files described generic security requirements
using DoD-specific phrasing, making the content appear
policy-specific even when the underlying requirement applies
to any organization.

Replace the DoD-framed audit event capability description in
three SELinux audit rules (semanage, setfiles, setsebool) with
generic language. Remove the named DoD form reference in
httpd_antivirus_scan_uploads, and remove the named product and
government contact URL from the install_hids warning block.

Also fix a pre-existing trailing whitespace on line 30 of
audit_rules_execution_semanage/rule.yml, found during lint
verification of the same file.

Note: mcafee_security_software/group.yml was reviewed but
excluded from this PR. Its DoD-specific content is the entire
substance of the rule, not incidental wording.

Resolves: ComplianceAsCode#8709
@openshift-ci openshift-ci Bot added the needs-ok-to-test Used by openshift-ci bot. label Jun 29, 2026
@openshift-ci

openshift-ci Bot commented Jun 29, 2026

Copy link
Copy Markdown

Hi @Tomatotech90. Thanks for your PR.

I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@Mab879 Mab879 self-assigned this Jun 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-ok-to-test Used by openshift-ci bot.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove DoD specific verbiage from rule.yml files

2 participants