Merge pull request ComplianceAsCode#7 from SUSE/SLES-12-010400

guangyee · Dec 9, 2020 · 2272211 · 2272211
2 parents 2b6cd4c + 3a58be0
commit 2272211
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 0 deletions.
diff --git a/linux_os/guide/services/obsolete/r_services/no_user_host_based_files/ansible/shared.yml b/linux_os/guide/services/obsolete/r_services/no_user_host_based_files/ansible/shared.yml
@@ -0,0 +1,22 @@
+# platform = multi_platform_sle
+# reboot = false
+# strategy = restrict
+# complexity = low
+# disruption = low
+- block:
+    - name: "Detect the .shosts files on the system"
+      find:
+          paths: /
+          recurse: yes
+          patterns: [".shosts"]
+          hidden: yes
+          file_type: "file"
+      check_mode: no
+      register: shosts_locations
+
+    - name: "Remove .shosts Files"
+      file:
+          path: "{{ item.path }}"
+          state: absent
+      with_items: "{{ shosts_locations.files }}"
+      when: shosts_locations is success
diff --git a/linux_os/guide/services/obsolete/r_services/no_user_host_based_files/rule.yml b/linux_os/guide/services/obsolete/r_services/no_user_host_based_files/rule.yml
@@ -22,6 +22,7 @@ severity: high
 
 identifiers:
     cce@rhel7: CCE-80514-3
+    cce@sle12: CCE-83021-6
 
 references:
     stigid@ol7: OL07-00-040540

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -15,3 +15,4 @@ selections:
     - sshd_do_not_permit_user_env
     - sshd_enable_x11_forwarding
     - gnome_gdm_disable_automatic_login
+    - no_user_host_based_files