Merge pull request ComplianceAsCode#9 from SUSE/SLES-12-010610

guangyee · Dec 10, 2020 · 145ff67 · 145ff67
2 parents 412845c + bddcefa
commit 145ff67
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 3 deletions.
diff --git a/...x_os/guide/system/accounts/accounts-physical/disable_ctrlaltdel_reboot/ansible/shared.yml b/...x_os/guide/system/accounts/accounts-physical/disable_ctrlaltdel_reboot/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Virtualization 4,multi_platform_fedora,multi_platform_ol
+# platform = Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Virtualization 4,multi_platform_fedora,multi_platform_ol,multi_platform_sle
 # reboot = false
 # strategy = disable
 # complexity = low

diff --git a/linux_os/guide/system/accounts/accounts-physical/disable_ctrlaltdel_reboot/rule.yml b/linux_os/guide/system/accounts/accounts-physical/disable_ctrlaltdel_reboot/rule.yml
@@ -1,6 +1,6 @@
 documentation_complete: true
 
-prodtype: fedora,rhcos4,ol7,ol8,rhel7,rhel8,rhv4,wrlinux1019
+prodtype: fedora,rhcos4,ol7,ol8,rhel7,rhel8,rhv4,wrlinux1019,sle12
 
 title: 'Disable Ctrl-Alt-Del Reboot Activation'
 
@@ -29,6 +29,7 @@ identifiers:
     cce@rhel7: CCE-27511-5
     cce@rhel8: CCE-80785-9
     cce@rhcos4: CCE-82493-8
+    cce@sle12: CCE-83018-2
 
 references:
     stigid@ol7: OL07-00-020230
@@ -39,6 +40,8 @@ references:
     nist-csf: PR.AC-4,PR.DS-5
     srg: SRG-OS-000324-GPOS-00125,SRG-OS-000480-GPOS-00227
     stigid@rhel7: RHEL-07-020230
+    stigid@sle12: SLES-12-010610
+    stigid@sle12: SLES-12-010611
     isa-62443-2013: 'SR 2.1,SR 5.2'
     isa-62443-2009: 4.3.3.7.3
     cobit5: APO01.06,DSS05.04,DSS05.07,DSS06.02

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -13,9 +13,10 @@ selections:
     - sudo_remove_no_authenticate
     - sshd_disable_empty_passwords
     - sshd_do_not_permit_user_env
+    - disable_ctrlaltdel_reboot
     - sshd_enable_x11_forwarding
     - gnome_gdm_disable_automatic_login
     - no_user_host_based_files
     - package_audit_installed
     - service_auditd_enabled
-    - auditd_data_retention_space_left
+    - auditd_data_retention_space_left