Issues

• AL2023: system_with_kernel is false on current AMIs (kernel package is kernel6.18), so whole CIS groups report notapplicabl

  ComplianceAsCode/content#15327 · Filter by author shifeeq opened on Nov 10, 2026

• file_permissions_sshd_private_key: root:ssh_keys keys fail where ssh_keys is in /usr/lib/group (Fedora CoreOS)

  ComplianceAsCode/content#15320 · Filter by author spnngl opened on Nov 9, 2026

• Update CIS Debian 12 controls to benchmark v2.0.0

  enhancement
  ComplianceAsCode/content#15318 · Filter by author realstuffie opened on Nov 9, 2026

• System containers (LXC/Incus, systemd-nspawn) lose more than half of the CIS checks because system_with_kernel treats them like application images

  ComplianceAsCode/content#15317 · Filter by author BerziOnline opened on Nov 8, 2026

• Container detection misses LXC/Incus and other systemd-managed containers; host-only rules and their remediations run inside the guest

  ComplianceAsCode/content#15316 · Filter by author BerziOnline opened on Nov 8, 2026

• gpgcheck rules for dnf.conf pass when gpgcheck is effectively disabled by a later line

  ComplianceAsCode/content#15314 · Filter by author yadlapatisathwik opened on Nov 7, 2026

• display_login_attempts can't pass on Fedora 43 and later: pam_lastlog.so is gone

  triaged
  ComplianceAsCode/content#15305 · Filter by author spnngl opened on Nov 5, 2026

• mount_option_nodev_nonroot_local_partitions writes bind mounts into /etc/fstab (DEVICE[PATH] source), host boots into emergency mode

  triaged
  ComplianceAsCode/content#15292 · Filter by author fqazzazee opened on Nov 3, 2026

• Bash sshd remediations do not reload sshd, so the running daemon keeps the old settings

  triaged
  ComplianceAsCode/content#15285 · Filter by author yadlapatisathwik opened on Nov 1, 2026

• grub2_bootloader_argument remediation fails when GRUB_CMDLINE_LINUX is empty or missing (grubby products)

  triaged
  ComplianceAsCode/content#15283 · Filter by author yadlapatisathwik opened on Nov 1, 2026

• Reduce duplication in tests/data/product_stability/*.yml with a shared common-properties file

  triaged
  ComplianceAsCode/content#15271 · Filter by author ggbecker opened on Oct 30, 2026
  1

• Request for CIS level 1 profile for Oracle Linux 10

  Oracle Linuxtriaged
  ComplianceAsCode/content#15242 · Filter by author ojasva-awasthi opened on Oct 23, 2026

• AlmaLinux journald rules ignore vendor drop-ins in /usr/lib/systemd/journald.conf.d/

  triaged
  ComplianceAsCode/content#15241 · Filter by author bde-ateme opened on Oct 23, 2026

• Reevaluate reverting ensure_redhat_gpgkey_installed Ansible remediation back to the rpm_key module (PQC key import fixed upstream)

  AnsibleRHELtriaged
  ComplianceAsCode/content#15175 · Filter by author ggbecker opened on Oct 8, 2026

• Add UnionTech UOS products (Server 25, Desktop 25, Desktop 20)

  triaged
  ComplianceAsCode/content#15174 · Filter by author slark-yuxj opened on Oct 8, 2026

• Set Password Minimum Age - regex not capturing negative values

  triaged
  ComplianceAsCode/content#15172 · Filter by author marcelfischer opened on Oct 8, 2026
  1

• UBI8 Ansible remediation tests fail

  RHELRHEL8triaged
  Bug

  ComplianceAsCode/content#15157 · Filter by author macko1 opened on Sep 30, 2026
  1

• all_dotfiles Does Not Match All Dotfiles

  triaged
  Bug

  ComplianceAsCode/content#15156 · Filter by author macko1 opened on Sep 29, 2026
  1

• Debian 12/13 CIS 1.6.1-1.6.3: banner_etc_issue_cis, banner_etc_issue_net_cis and banner_etc_motd_cis pass the default Debian banners

  triaged
  ComplianceAsCode/content#15150 · Filter by author dynayl opened on Sep 28, 2026

• Rule auditd_audispd_configure_sufficiently_large_partition is misaligned with DISA

  productization-issueRHEL10STIGtriaged
  ComplianceAsCode/content#15137 · Filter by author jan-cerny opened on Sep 22, 2026

• Rules of audit_rules_privileged_commands template are misaligned with DISA

  productization-issueRHEL10STIGtriaged
  ComplianceAsCode/content#15136 · Filter by author jan-cerny opened on Sep 22, 2026

• Rules of audit_rules_dac_modification template are misaligned with DISA

  productization-issueRHEL10STIGtriaged
  ComplianceAsCode/content#15135 · Filter by author jan-cerny opened on Sep 22, 2026
  

• rsyslog_remote_access_monitoring is misaligned with DISA

  productization-issueRHEL10STIGtriaged
  ComplianceAsCode/content#15134 · Filter by author jan-cerny opened on Sep 22, 2026
  1

• Rule rpm_verify_permissions fails on /var/lib/fwupd

  Ansibleproductization-issueRHEL10
  ComplianceAsCode/content#15132 · Filter by author jan-cerny opened on Sep 21, 2026
  4

• DISA-alignment mismatch on audit_rules_login_events_lastlog — SSG pass, DISA fail (RHEL 9.2/9.4/9.6/9.8/9.9)

  productization-issuetriaged
  ComplianceAsCode/content#15054 · Filter by author ggbecker opened on Aug 25, 2026