From 469ce0f841bedbd2741e726b69b03e9d4ed118d2 Mon Sep 17 00:00:00 2001 From: Marcos Oviedo Date: Thu, 9 Mar 2023 11:33:20 -0300 Subject: [PATCH] Fixing CIS testcases (#10296) This relates to #9848 --- ee/cis/win-10/test/instructions/CIS_2.2.12.txt | 4 ++-- ee/cis/win-10/test/instructions/CIS_2.2.13.txt | 4 ++-- ee/cis/win-10/test/instructions/CIS_2.2.14.txt | 8 ++++---- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/ee/cis/win-10/test/instructions/CIS_2.2.12.txt b/ee/cis/win-10/test/instructions/CIS_2.2.12.txt index f9544cb379..fb96d08b96 100644 --- a/ee/cis/win-10/test/instructions/CIS_2.2.12.txt +++ b/ee/cis/win-10/test/instructions/CIS_2.2.12.txt @@ -1,6 +1,6 @@ Expected scenario ================== -1) Open "Edit Group Policy" tool and set the following UI path to an empty value: +1) Open "Edit Group Policy" tool and set the following UI path to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE': 'Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create global objects' 2) After running the policy check, it should return 1 indicating that setting was properly set @@ -9,7 +9,7 @@ Expected scenario Failure scenario ================== -1) Open "Edit Group Policy" tool and set the following UI path to a value other than an empty value: +1) Open "Edit Group Policy" tool and set the following UI path to a value other than 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE': 'Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create global objects' 2) After running the policy check, it should return nothing, indicating that setting was set to a non-compliant value \ No newline at end of file diff --git a/ee/cis/win-10/test/instructions/CIS_2.2.13.txt b/ee/cis/win-10/test/instructions/CIS_2.2.13.txt index f9544cb379..d11750c430 100644 --- a/ee/cis/win-10/test/instructions/CIS_2.2.13.txt +++ b/ee/cis/win-10/test/instructions/CIS_2.2.13.txt @@ -1,7 +1,7 @@ Expected scenario ================== 1) Open "Edit Group Policy" tool and set the following UI path to an empty value: -'Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create global objects' +'Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create permanent shared objects' 2) After running the policy check, it should return 1 indicating that setting was properly set @@ -10,6 +10,6 @@ Expected scenario Failure scenario ================== 1) Open "Edit Group Policy" tool and set the following UI path to a value other than an empty value: -'Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create global objects' +'Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create permanent shared objects' 2) After running the policy check, it should return nothing, indicating that setting was set to a non-compliant value \ No newline at end of file diff --git a/ee/cis/win-10/test/instructions/CIS_2.2.14.txt b/ee/cis/win-10/test/instructions/CIS_2.2.14.txt index f37278a184..d112e6627d 100644 --- a/ee/cis/win-10/test/instructions/CIS_2.2.14.txt +++ b/ee/cis/win-10/test/instructions/CIS_2.2.14.txt @@ -1,7 +1,7 @@ Expected scenario ================== -1) Open "Edit Group Policy" tool and set the following UI path to an empty list: -'Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create permanent shared objects' +1) Open "Edit Group Policy" tool and set the following UI path to 'Administrators or NT VIRTUAL MACHINE\Virtual Machines': +'Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create symbolic links' 2) After running the policy check, it should return 1 indicating that setting was properly set @@ -9,7 +9,7 @@ Expected scenario Failure scenario ================== -1) Open "Edit Group Policy" tool and set the following UI path to a value other than an empty list: -'Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create permanent shared objects' +1) Open "Edit Group Policy" tool and set the following UI path to a value other than 'Administrators or NT VIRTUAL MACHINE\Virtual Machines': +'Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create symbolic links' 2) After running the policy check, it should return nothing, indicating that setting was set to a non-compliant value \ No newline at end of file