The "Create repository on push" option in MSR must be disabled.
An XCCDF Rule
Description
<VulnDiscussion>Allowing repositories to be created on a push can override essential settings and must not be allowed.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-260928r966141_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
If MSR is not being utilized, this is Not Applicable.
Verify the "Create repository on push" option is disabled in MSR:
Log in to the MSR web UI as an administrator and navigate to System >> General Tab >>Repositories Section.