processed xml contains duplicates of principal

Open pursca opened this issue 6 years ago • 1 comments

here are all duplicates: those dups will cause the Test-DSCConfiguration result as false after STIG applied.

C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsClient-10-1.14.xml rule: V-63373.a ***** dup found: principal: Authenticated Users rule: V-63373.b ***** dup found: principal: SYSTEM rule: V-63373.b ***** dup found: principal: Administrators rule: V-63373.c ***** dup found: principal: SYSTEM rule: V-63373.c ***** dup found: principal: Administrators rule: V-63593.b ***** dup found: principal: CREATOR OWNER rule: V-63593.b ***** dup found: principal: ALL APPLICATION PACKAGES rule: V-63593.c ***** dup found: principal: CREATOR OWNER C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsClient-10-1.15.xml rule: V-63373.a ***** dup found: principal: Authenticated Users rule: V-63373.b ***** dup found: principal: SYSTEM rule: V-63373.b ***** dup found: principal: Administrators rule: V-63373.c ***** dup found: principal: SYSTEM rule: V-63373.c ***** dup found: principal: Administrators rule: V-63593.b ***** dup found: principal: CREATOR OWNER rule: V-63593.b ***** dup found: principal: ALL APPLICATION PACKAGES rule: V-63593.c ***** dup found: principal: CREATOR OWNER C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsClient-10-1.16.xml rule: V-63373.a ***** dup found: principal: Authenticated Users rule: V-63373.b ***** dup found: principal: SYSTEM rule: V-63373.b ***** dup found: principal: Administrators rule: V-63373.c ***** dup found: principal: SYSTEM rule: V-63373.c ***** dup found: principal: Administrators rule: V-63593.b ***** dup found: principal: CREATOR OWNER rule: V-63593.b ***** dup found: principal: ALL APPLICATION PACKAGES rule: V-63593.c ***** dup found: principal: CREATOR OWNER C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2012R2-DC-2.14.xml rule: V-39326 ***** dup found: principal: Everyone rule: V-39326 ***** dup found: principal: Everyone rule: V-39327 ***** dup found: principal: Everyone rule: V-39327 ***** dup found: principal: Everyone rule: V-39328 ***** dup found: principal: Everyone rule: V-39328 ***** dup found: principal: Everyone rule: V-39328 ***** dup found: principal: Everyone rule: V-39329 ***** dup found: principal: Everyone rule: V-39329 ***** dup found: principal: Everyone rule: V-39330 ***** dup found: principal: Everyone rule: V-39330 ***** dup found: principal: Everyone rule: V-39331 ***** dup found: principal: Administrators rule: V-40177.a ***** dup found: principal: SYSTEM rule: V-40177.a ***** dup found: principal: Administrators rule: V-40177.b ***** dup found: principal: SYSTEM rule: V-40177.b ***** dup found: principal: Administrators rule: V-40178 ***** dup found: principal: Users rule: V-40178 ***** dup found: principal: Users rule: V-40179 ***** dup found: principal: SYSTEM rule: V-40179 ***** dup found: principal: Administrators C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2012R2-DC-2.15.xml rule: V-39326 ***** dup found: principal: Everyone rule: V-39326 ***** dup found: principal: Everyone rule: V-39327 ***** dup found: principal: Everyone rule: V-39327 ***** dup found: principal: Everyone rule: V-39328 ***** dup found: principal: Everyone rule: V-39328 ***** dup found: principal: Everyone rule: V-39328 ***** dup found: principal: Everyone rule: V-39329 ***** dup found: principal: Everyone rule: V-39329 ***** dup found: principal: Everyone rule: V-39330 ***** dup found: principal: Everyone rule: V-39330 ***** dup found: principal: Everyone rule: V-39331 ***** dup found: principal: Administrators rule: V-40177.a ***** dup found: principal: SYSTEM rule: V-40177.a ***** dup found: principal: Administrators rule: V-40177.b ***** dup found: principal: SYSTEM rule: V-40177.b ***** dup found: principal: Administrators rule: V-40178 ***** dup found: principal: Users rule: V-40178 ***** dup found: principal: Users rule: V-40179 ***** dup found: principal: SYSTEM rule: V-40179 ***** dup found: principal: Administrators C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2012R2-DC-2.16.xml rule: V-39326 ***** dup found: principal: Everyone rule: V-39326 ***** dup found: principal: Everyone rule: V-39327 ***** dup found: principal: Everyone rule: V-39327 ***** dup found: principal: Everyone rule: V-39328 ***** dup found: principal: Everyone rule: V-39328 ***** dup found: principal: Everyone rule: V-39328 ***** dup found: principal: Everyone rule: V-39329 ***** dup found: principal: Everyone rule: V-39329 ***** dup found: principal: Everyone rule: V-39330 ***** dup found: principal: Everyone rule: V-39330 ***** dup found: principal: Everyone rule: V-39331 ***** dup found: principal: Administrators rule: V-40177.a ***** dup found: principal: SYSTEM rule: V-40177.a ***** dup found: principal: Administrators rule: V-40177.b ***** dup found: principal: SYSTEM rule: V-40177.b ***** dup found: principal: Administrators rule: V-40178 ***** dup found: principal: Users rule: V-40178 ***** dup found: principal: Users rule: V-40179 ***** dup found: principal: SYSTEM rule: V-40179 ***** dup found: principal: Administrators C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2012R2-MS-2.12.xml rule: V-40177.a ***** dup found: principal: SYSTEM rule: V-40177.a ***** dup found: principal: Administrators rule: V-40177.b ***** dup found: principal: SYSTEM rule: V-40177.b ***** dup found: principal: Administrators rule: V-40178 ***** dup found: principal: Users rule: V-40178 ***** dup found: principal: Users rule: V-40179 ***** dup found: principal: SYSTEM rule: V-40179 ***** dup found: principal: Administrators C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2012R2-MS-2.13.xml rule: V-40177.a ***** dup found: principal: SYSTEM rule: V-40177.a ***** dup found: principal: Administrators rule: V-40177.b ***** dup found: principal: SYSTEM rule: V-40177.b ***** dup found: principal: Administrators rule: V-40178 ***** dup found: principal: Users rule: V-40178 ***** dup found: principal: Users rule: V-40179 ***** dup found: principal: SYSTEM rule: V-40179 ***** dup found: principal: Administrators C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2012R2-MS-2.14.xml rule: V-40177.a ***** dup found: principal: SYSTEM rule: V-40177.a ***** dup found: principal: Administrators rule: V-40177.b ***** dup found: principal: SYSTEM rule: V-40177.b ***** dup found: principal: Administrators rule: V-40178 ***** dup found: principal: Users rule: V-40178 ***** dup found: principal: Users rule: V-40179 ***** dup found: principal: SYSTEM rule: V-40179 ***** dup found: principal: Administrators C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2012R2-MS-2.15.xml rule: V-40177.a ***** dup found: principal: SYSTEM rule: V-40177.a ***** dup found: principal: Administrators rule: V-40177.b ***** dup found: principal: SYSTEM rule: V-40177.b ***** dup found: principal: Administrators rule: V-40178 ***** dup found: principal: Users rule: V-40178 ***** dup found: principal: Users rule: V-40179 ***** dup found: principal: SYSTEM rule: V-40179 ***** dup found: principal: Administrators C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2016-DC-1.6.xml rule: V-73249 ***** dup found: principal: Users rule: V-73249 ***** dup found: principal: Users rule: V-73251.a ***** dup found: principal: SYSTEM rule: V-73251.a ***** dup found: principal: Administrators rule: V-73251.b ***** dup found: principal: SYSTEM rule: V-73251.b ***** dup found: principal: Administrators rule: V-73253 ***** dup found: principal: SYSTEM rule: V-73253 ***** dup found: principal: Administrators rule: V-73255.b ***** dup found: principal: CREATOR OWNER rule: V-73255.b ***** dup found: principal: ALL APPLICATION PACKAGES rule: V-73255.c ***** dup found: principal: CREATOR OWNER rule: V-73371 ***** dup found: principal: Administrators rule: V-73391 ***** dup found: principal: Everyone rule: V-73391 ***** dup found: principal: Everyone rule: V-73393 ***** dup found: principal: Everyone rule: V-73393 ***** dup found: principal: Everyone rule: V-73395 ***** dup found: principal: Everyone rule: V-73395 ***** dup found: principal: Everyone rule: V-73395 ***** dup found: principal: Everyone rule: V-73397 ***** dup found: principal: Everyone rule: V-73397 ***** dup found: principal: Everyone rule: V-73399 ***** dup found: principal: Everyone rule: V-73399 ***** dup found: principal: Everyone C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2016-DC-1.7.xml rule: V-73249 ***** dup found: principal: Users rule: V-73249 ***** dup found: principal: Users rule: V-73251.a ***** dup found: principal: SYSTEM rule: V-73251.a ***** dup found: principal: Administrators rule: V-73251.b ***** dup found: principal: SYSTEM rule: V-73251.b ***** dup found: principal: Administrators rule: V-73253 ***** dup found: principal: SYSTEM rule: V-73253 ***** dup found: principal: Administrators rule: V-73255.b ***** dup found: principal: CREATOR OWNER rule: V-73255.b ***** dup found: principal: ALL APPLICATION PACKAGES rule: V-73255.c ***** dup found: principal: CREATOR OWNER rule: V-73371 ***** dup found: principal: Administrators rule: V-73391 ***** dup found: principal: Everyone rule: V-73391 ***** dup found: principal: Everyone rule: V-73393 ***** dup found: principal: Everyone rule: V-73393 ***** dup found: principal: Everyone rule: V-73395 ***** dup found: principal: Everyone rule: V-73395 ***** dup found: principal: Everyone rule: V-73395 ***** dup found: principal: Everyone rule: V-73397 ***** dup found: principal: Everyone rule: V-73397 ***** dup found: principal: Everyone rule: V-73399 ***** dup found: principal: Everyone rule: V-73399 ***** dup found: principal: Everyone C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2016-MS-1.6.xml rule: V-73249 ***** dup found: principal: Users rule: V-73249 ***** dup found: principal: Users rule: V-73251.a ***** dup found: principal: SYSTEM rule: V-73251.a ***** dup found: principal: Administrators rule: V-73251.b ***** dup found: principal: SYSTEM rule: V-73251.b ***** dup found: principal: Administrators rule: V-73253 ***** dup found: principal: SYSTEM rule: V-73253 ***** dup found: principal: Administrators rule: V-73255.b ***** dup found: principal: CREATOR OWNER rule: V-73255.b ***** dup found: principal: ALL APPLICATION PACKAGES rule: V-73255.c ***** dup found: principal: CREATOR OWNER C:\Program Files\WindowsPowerShell\Modules\PowerSTIG\3.2.0\StigData\Processed\WindowsServer-2016-MS-1.7.xml rule: V-73249 ***** dup found: principal: Users rule: V-73249 ***** dup found: principal: Users rule: V-73251.a ***** dup found: principal: SYSTEM rule: V-73251.a ***** dup found: principal: Administrators rule: V-73251.b ***** dup found: principal: SYSTEM rule: V-73251.b ***** dup found: principal: Administrators rule: V-73253 ***** dup found: principal: SYSTEM rule: V-73253 ***** dup found: principal: Administrators rule: V-73255.b ***** dup found: principal: CREATOR OWNER rule: V-73255.b ***** dup found: principal: ALL APPLICATION PACKAGES rule: V-73255.c ***** dup found: principal: CREATOR OWNER

Jul 30 '19 03:07 pursca

Hi @pursca Some of these rules require the same principal be used multiple times. The V-63373.a rule is a good example of this behavior, the Authenticated Users principal has two different rights being applied. However, there are rules, which we discussed that are broken and now fixed #442.

Jul 31 '19 13:07 bcwilhite