Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The "Create repository on push" option in MSR must be disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-260928 | CNTR-MK-000620 | SV-260928r966141_rule | Medium |
| Description |
|---|
| Allowing repositories to be created on a push can override essential settings and must not be allowed. |
| STIG | Date |
|---|---|
| Mirantis Kubernetes Engine Security Technical Implementation Guide | 2024-04-10 |
Details
| Check Text ( C-64657r966139_chk ) |
|---|
| If MSR is not being utilized, this is Not Applicable. Verify the "Create repository on push" option is disabled in MSR: Log in to the MSR web UI as an administrator and navigate to System >> General Tab >>Repositories Section. Verify the "Create repository on push" slider is turned off. If it is turned on, this is a finding. |
| Fix Text (F-64565r966140_fix) |
|---|
| If MSR is not being utilized, this is Not Applicable. Verify the "Create repository on push" option is disabled in MSR: Log in to the MSR web UI as an administrator and navigate to System >> General Tab >>Repositories Section. Set the "Create repository on push" slider to off. |