The "Create repository on push" option in MSR must be disabled.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-260928 | SRG-APP-000141-CTR-000320 | CNTR-MK-000620 | SV-260928r966141_rule | 2024-08-27 | 2 |
| Description |
|---|
| Allowing repositories to be created on a push can override essential settings and must not be allowed. |
| ℹ️ Check |
|---|
| If MSR is not being utilized, this is Not Applicable. Verify the "Create repository on push" option is disabled in MSR: Log in to the MSR web UI as an administrator and navigate to System >> General Tab >>Repositories Section. Verify the "Create repository on push" slider is turned off. If it is turned on, this is a finding. |
| ✔️ Fix |
|---|
| If MSR is not being utilized, this is Not Applicable. Verify the "Create repository on push" option is disabled in MSR: Log in to the MSR web UI as an administrator and navigate to System >> General Tab >>Repositories Section. Set the "Create repository on push" slider to off. |