rhel8-script-anssi_bp28_high.sh
SHELL
Verdict: BENIGN
AI
Legitimate security hardening script
Local reference
Suspicious dependency
Inferred
rhel8-script-anssi_bp28_high.sh
shell
| 16 |
# Benchmark ID: xccdf_org.ssgproject.content_benchmark_RHEL-8 |
|
| 17 |
# Benchmark Version: 0.1.81 |
|
| 18 |
# XCCDF Version: 1.2 |
OpenSCAP XCCDF profile marker |
| 19 |
# |
|
| 20 |
# This file can be generated by OpenSCAP using: |
|
| 21 |
# $ oscap xccdf generate fix --profile xccdf_org.ssgproject.content_profile_anssi_bp28_high --fix-type bash ssg-rhel8-ds.xml |
|
| 22 |
# |
|
| 23 |
# This Bash Remediation Script is generated from an XCCDF profile without preliminary evaluation. |
OpenSCAP Bash remediation profile banner |
| 24 |
# It attempts to fix every selected rule, even if the system is already compliant. |
|
| 25 |
# |
|
| 46 |
if ! rpm -q --quiet "aide" ; then |
|
| 47 |
yum install -y "aide" |
|
| 48 |
fi |
|
| 94 |
CRON_FILE="/etc/crontab" |
|
| 124 |
CRONTAB=/etc/crontab |
|
| 125 |
CRONDIRS='/etc/cron.d /etc/cron.daily /etc/cron.weekly /etc/cron.monthly' |
|
| 4529 |
>&2 echo "root is not a defined group on the system" |
|
| 4530 |
else |
|
| 4531 |
if ! stat -c "%g %G" "/etc/ipsec.secrets" | grep -E -w -q "root"; then |
OpenBSD IPsec secret path |
| 4532 |
chgrp --no-dereference "$newgroup" /etc/ipsec.secrets |
|
| 4533 |
fi |
|
Identity
| SHA-256 |
db7a031e3edfd319e0df177da754977fafb9bacce80a606f1f9988a43d504d56 |
| Canonical SHA-256 |
007cbd388347412d95693f46bc29dca158c96f303b27d8591dd3abfeace387db |
| Filename |
rhel8-script-anssi_bp28_high.sh |
Origin
| Source |
forager |
| Feed |
osimage |
| Ecosystem |
rocky |
Timeline
| First seen |
27 Jul 2026 08:47 UTC |
| First analyzed |
27 Jul 2026 11:31 UTC |
| Last analyzed |
27 Jul 2026 12:30 UTC |
| Last updated |
27 Jul 2026 12:30 UTC |
Labeling
| Label |
good |
| Label source |
forager |
| Traits version |
488c9 |