PowerStig icon indicating copy to clipboard operation
PowerStig copied to clipboard

Add Ability to overwrite Automated STIG comments or Update the comment to provide more detail as to how the the rule is configured under the Hood.

Open EngThis opened this issue 5 years ago • 0 comments

Is your feature request related to a problem? Please describe. The problem is that the generated checklist comment "Addressed by PowerStig MOF via MSFT_ResourceInDesiredState" is not enough detail as to how the rule is mitigated. Most security personnel who review this will not understand what this means. If Im reading the Documentation wiki correctly automated STIGS cannot have the comments injected for them leaving administrators the need to manually update each comment with specific info as to how DSC applys a configuration.

Describe the solution you'd like I would like to see the ability to overwrite comments like "Addressed by PowerStig MOF via MSFT_ResourceInDesiredState" so that enough detail is available for a security reviewer or your team could change the comments to something like, DSC takes the following parameters and uses them in "Specific Command here" to apply the setting.(The latter seems like alot of work)

Describe alternatives you've considered Ive considered writing a function that can take the end result of New-STIGChecklist and a manual entries XML and overwrite the fields to include more complete data that an ATO approver would want to see.

Perhaps a switch(-AllowOverwrite) could be incorporated so that the current functionality is perserved but also allow Autamated STIG rules comments to be overwritten. It would be useful to extend this to the other Fields in the checklist as well fr example the Finding details fields.

Additional context I attempted to inject a manual entry XML that I created for STIG Rules that were automated with PowerSTIG and failed, documentation leads me to believe this is not able to be done in PowerSTIGs current state.

EngThis avatar Nov 02 '20 21:11 EngThis