Merge pull request ComplianceAsCode#23 from SUSE/SLES-12-030190

Add rules for SLES-12-030190 STIG
guangyee · Dec 11, 2020 · 0d4bb4b · 0d4bb4b
2 parents d26d46d + a178afe
commit 0d4bb4b
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 1 deletion.
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/ansible/shared.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv
+# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv,multi_platform_sle
 # reboot = false
 # strategy = restrict
 # complexity = low

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/rule.yml
@@ -28,6 +28,7 @@ identifiers:
     cce@rhel7: CCE-27433-2
     cce@rhel8: CCE-80906-1
     cce@rhcos4: CCE-82549-7
+    cce@sle12: CCE-83027-3
 
 references:
     stigid@ol7: OL07-00-040320

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -14,6 +14,7 @@ selections:
     - sudo_remove_no_authenticate
     - sshd_disable_empty_passwords
     - sshd_do_not_permit_user_env
+    - sshd_set_idle_timeout
     - disable_ctrlaltdel_reboot
     - sshd_enable_x11_forwarding
     - gnome_gdm_disable_automatic_login