When not using regular expressions, the bracket characters enclosing <Value> entries indicate that the text should be matched literally (for example with a set amount of whitespace, or an entire line of a file.)
This can also be used to test for nothing:
<Value>[""]</Value>
or NOT nothing
<Value>[!""]</Value>
Regular Expressions
Basic regex pattern matching can be used in signature content. When regex is detected by ConfigOS remediation of the rule will no longer be possible.
^ marking the beginning of a line.
$ marking the end of a line.
\s* to ignore any number of whitespaces.
[0-9/a-z] matching various letters or numbers as indicated.
| as an OR argument, ex: [1|2|3] would match 1, 2, or 3.
Please note that not all regular expression syntax can or will be supported by ConfigOS.
<Group>
<GroupId>V-230221</GroupId>
<GroupTitle>SRG-OS-000480-GPOS-00227</GroupTitle>
<RuleId>SV-230221r858734_rule</RuleId>
<Severity>CAT I</Severity>
<RuleVersion>RHEL-08-010000</RuleVersion>
<RuleTitle>RHEL 8 must be a vendor-supported release.</RuleTitle>
<Where>/etc/redhat-release</Where>
<Applied>^Red Hat Enterprise Linux release</Applied>
<Type>Configuration</Type>
<Value>[(?:8\.[5-9]|8\.10)],</Value>
<Ignore>case,space,import</Ignore>
<IgnoreReason>Current End of Extended Update Support for RHEL 8.1 is 30 November 2021.
Current End of Extended Update Support for RHEL 8.2 is 30 April 2022.
Current End of Extended Update Support for RHEL 8.4 is 30 April 2023.
Current End of Maintenance Support for RHEL 8.5 is 30 April 2022.
Current End of Extended Update Support for RHEL 8.6 is 30 April 2024.
Current End of Maintenance Support for RHEL 8.7 is 30 April 2023.
Current End of Extended Update Support for RHEL 8.8 is 30 April 2025.
Current End of Maintenance Support for RHEL 8.9 is 30 April 2024.
Current End of Maintenance Support for RHEL 8.10 is 31 May 2029.
Please change the value to reflect your release of Red Hat</IgnoreReason>
</Group>
