List view

OL7: invalid link in the PCI-DSS table

Oracle LinuxOracle Linux product related.Oracle Linux product related.

triaged

Status: Open.

#13816 In ComplianceAsCode/content;

· vojtapolasek opened on Aug 26, 2025

Add new build option to generate ansible roles out of profile ansible playbooks

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 13831

#13831 In ComplianceAsCode/content;

· ggbecker opened on Aug 28, 2025

CMP-3566: Ensure a CLF exists and check for secure URLs

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14031

#14031 In ComplianceAsCode/content;

· yuumasato opened on Oct 21, 2025

CMP-3756: Configure MintMaker updates on RPM lockfiles

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14041

#14041 In ComplianceAsCode/content;

· yuumasato opened on Oct 24, 2025

Add Amazon Linux 2023 DISA STIG Profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14246

#14246 In ComplianceAsCode/content;

· Eric-Domeier opened on Dec 16, 2025

Add build-time test for ansible variable conflicts

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14347

#14347 In ComplianceAsCode/content;

· ggbecker opened on Jan 30, 2026

Patch ansible remediation for postfix_network_listening_disabled rule

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14394

#14394 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 14, 2026

Fix podman test compatibility: remove hardcoded network backend

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14422

#14422 In ComplianceAsCode/content;

· Copilot opened on Feb 18, 2026

Use drop-ins file in /etc/login.defs.d/

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14438

#14438 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

SLE16 check permissions /usr/etc/ssh/sshd_config

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update RuleIssues or pull requests related to Rules updates.Issues or pull requests related to Rules updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14439

#14439 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

Fix AIDE Database option deprecation

DebianDebian product related.Debian product related.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

UbuntuUbuntu product related.Ubuntu product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14557

#14557 In ComplianceAsCode/content;

· Azim-Azizov opened on Mar 12, 2026

Update find-rule skill to look for sibling rules

Status: Open (in progress).

ComplianceAsCode/contentnumber 14530

#14530 In ComplianceAsCode/content;

· rhmdnd opened on Mar 4, 2026

Harden filter evaluation and command execution

InfrastructureOur content build systemOur content build system

Status: Open (in progress).

ComplianceAsCode/contentnumber 14591

#14591 In ComplianceAsCode/content;

· shawndwells opened on Mar 20, 2026

CMP-4040, CMP-4041: Add support for CEL based rules and profiles

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14597

#14597 In ComplianceAsCode/content;

· yuumasato opened on Mar 24, 2026

ocp4: Enable sshd distributed config to check sshd_config.d drop-ins

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14603

#14603 In ComplianceAsCode/content;

· sebrandon1 opened on Mar 27, 2026

Add postfix package requirement and audit retention controls to multiple profile controls

Status: Open (in progress).

ComplianceAsCode/contentnumber 14612

#14612 In ComplianceAsCode/content;

· Arden97 opened on Apr 2, 2026

Sle16 use /etc/security/faillock.conf for pam faillock configuration

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update TemplateIssues or pull requests related to Templates updates.Issues or pull requests related to Templates updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14624

#14624 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Apr 6, 2026

Make sure the sequoia package is installed across CIS profiles

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14632

#14632 In ComplianceAsCode/content;

· ggbecker opened on Apr 9, 2026

Add rule accounts_umask_etc_bashrc to Hummingbird

HummingbirdHummingbird project or container images relatedHummingbird project or container images related

Status: Open (in progress).

ComplianceAsCode/contentnumber 14630

#14630 In ComplianceAsCode/content;

· jan-cerny opened on Apr 8, 2026

Fix chronyd_or_ntpd_set_maxpoll bash remediation when /etc/chrony.d is missing

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14638

#14638 In ComplianceAsCode/content;

· ggbecker opened on Apr 10, 2026

Add NIST 800-53 Rev 5 control framework with OSCAL metadata and CIS mappings

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14640

#14640 In ComplianceAsCode/content;

· ggbecker opened on Apr 10, 2026