Add rules and remediation for SLES-12-030191 STIG

guangyee · Dec 14, 2020 · 2dd02c9 · 2dd02c9
1 parent d26d46d
commit 2dd02c9
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/ansible/shared.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/ansible/shared.yml
@@ -0,0 +1,7 @@
+# platform = multi_platform_sle
+# reboot = false
+# strategy = restrict
+# complexity = low
+# disruption = low
+
+{{{ ansible_sshd_set(parameter="ClientAliveCountMax", value="0") }}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel7: CCE-27082-7
     cce@rhel8: CCE-80907-9
     cce@rhcos4: CCE-82464-9
+    cce@sle12: CCE-83034-9
 
 references:
     stigid@ol7: OL07-00-040340

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -16,6 +16,7 @@ selections:
     - sshd_do_not_permit_user_env
     - disable_ctrlaltdel_reboot
     - sshd_enable_x11_forwarding
+    - sshd_set_keepalive
     - gnome_gdm_disable_automatic_login
     - no_user_host_based_files
     - auditd_data_disk_full_action