The "Create repository on push" option in MSR must be disabled.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-260928 | SRG-APP-000141-CTR-000320 | CNTR-MK-000620 | SV-260928r966141_rule | 2024-08-27 | 2 |
Description
Allowing repositories to be created on a push can override essential settings and must not be allowed.
ℹ️ Check
If MSR is not being utilized, this is Not Applicable.
Verify the "Create repository on push" option is disabled in MSR:
Log in to the MSR web UI as an administrator and navigate to System >> General Tab >>Repositories Section.
Verify the "Create repository on push" slider is turned off. If it is turned on, this is a finding.
✔️ Fix
If MSR is not being utilized, this is Not Applicable.
Verify the "Create repository on push" option is disabled in MSR:
Log in to the MSR web UI as an administrator and navigate to System >> General Tab >>Repositories Section.
Set the "Create repository on push" slider to off.