Fix check 1.1.37. #173
Fix check 1.1.37. #173
Conversation
There was a problem hiding this comment.
I suspect the bin_op: and is not correct - should this be testing that --feature-gates doesn't have AdvancedAuditing=face, OR --feature-gates is not set at all?
In addition, from the audit description I think we should be checking that --audit-policy-file is set, right?
(I just raised a ticket on the CIS spec as I don't think the remediation description is complete - it only covers the audit policy file part and not the feature-gates setting.)
|
@lizrice you are right about the bin_op. I have pushed the change. About checking |
|
Yes, I think the CIS describes the audit but our test doesn't fully implement it without the check on the --audit-policy-file so it would be good if you could add that as well (can be in a new PR though) |
Check 1.1.37 should pass if --features-gate is not set or if features-gate is set to AdvancedAuditing=false.