Merge pull request ComplianceAsCode#14 from SUSE/SLES-12-020030

guangyee · Dec 10, 2020 · 412845c · 412845c
2 parents dfbfb26 + 7de7e10
commit 412845c
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 4 deletions.
diff --git a/...iting/configure_auditd_data_retention/auditd_data_retention_space_left/ansible/shared.yml b/...iting/configure_auditd_data_retention/auditd_data_retention_space_left/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = Red Hat Virtualization 4,multi_platform_fedora,multi_platform_rhel,multi_platform_ol
+# platform = Red Hat Virtualization 4,multi_platform_fedora,multi_platform_rhel,multi_platform_ol,multi_platform_sle
 # reboot = false
 # strategy = restrict
 # complexity = low

diff --git a/.../auditing/configure_auditd_data_retention/auditd_data_retention_space_left/bash/shared.sh b/.../auditing/configure_auditd_data_retention/auditd_data_retention_space_left/bash/shared.sh
@@ -1,4 +1,4 @@
-# platform = Red Hat Virtualization 4,multi_platform_rhel,multi_platform_wrlinux,multi_platform_ol
+# platform = Red Hat Virtualization 4,multi_platform_rhel,multi_platform_wrlinux,multi_platform_ol,multi_platform_sle
 . /usr/share/scap-security-guide/remediation_functions
 {{{ bash_instantiate_variables("var_auditd_space_left") }}}
 

diff --git a/...system/auditing/configure_auditd_data_retention/auditd_data_retention_space_left/rule.yml b/...system/auditing/configure_auditd_data_retention/auditd_data_retention_space_left/rule.yml
@@ -1,6 +1,6 @@
 documentation_complete: true
 
-prodtype: rhcos4,ol7,ol8,rhel7,rhel8,rhv4,wrlinux1019
+prodtype: rhcos4,ol7,ol8,rhel7,rhel8,rhv4,wrlinux1019,sle12
 
 title: 'Configure auditd space_left on Low Disk Space'
 
@@ -22,6 +22,7 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-80537-4
     cce@rhcos4: CCE-82681-8
+    cce@sle12: CCE-83026-5
 
 references:
     stigid@ol7: OL07-00-030330
@@ -37,6 +38,10 @@ references:
     cobit5: APO11.04,APO12.06,APO13.01,BAI03.05,BAI04.04,BAI08.02,DSS02.02,DSS02.04,DSS02.07,DSS03.01,DSS05.04,DSS05.07,MEA02.01
     iso27001-2013: A.12.1.3,A.12.4.1,A.12.4.2,A.12.4.3,A.12.4.4,A.12.7.1,A.16.1.4,A.16.1.5,A.16.1.7,A.17.2.1
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8
+    stigid@sle12: SLES-12-020030
+    srg@sle12: SRG-OS-000343-GPOS-00134
+    disa@sle12: CCI-001855
+    nist@sle12: AU-5(1)
 
 ocil_clause: 'the system is not configured a specfic size in MB to notify administrators of an issue'
 

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -17,4 +17,5 @@ selections:
     - gnome_gdm_disable_automatic_login
     - no_user_host_based_files
     - package_audit_installed
-    - service_auditd_enabled
+    - service_auditd_enabled
+    - auditd_data_retention_space_left