Audiobuzz 943f3e29ce tailoring: waive chronyd_server_directive — check-only companion of the secure_ntp NTP-server waivers (#17) ...

Its OVAL requires a literal ^server line in the baked chrony.conf, which can
never exist under secure_ntp: the fail-closed re-strip removes every static
server and the NTS source is derived at runtime into /run/chrony-dhcp. Surfaced
as the single REVIEW row on scan poam-hardening-4e9ab45 (the first full scan of
the post-secure-ntp merge).

2026-07-12 09:25:02 +00:00

..

chrony-dhcp-dispatcher.te

stig: fix chrony SELinux .te — use raw module syntax, not policy_module() macro

2026-07-03 02:53:57 +00:00

diskless-tailoring.xml

tailoring: waive chronyd_server_directive — check-only companion of the secure_ntp NTP-server waivers (#17)

2026-07-12 09:25:02 +00:00

fapolicyd-tmpfs.te

stig: ship fapolicyd_tmpfs SELinux module — close overlay exec-guard gap

2026-07-03 07:18:01 +00:00

fleet-agent-chronylog.te

agent: add chrony supplementary group so it can read tracking.log (DAC)

2026-07-10 12:45:44 +00:00