Merge pull request ComplianceAsCode#13 from SUSE/SLES-12-010030

guangyee · Dec 10, 2020 · 44382d5 · 44382d5
2 parents c4d8374 + 179b5e7
commit 44382d5
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 4 deletions.
diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = multi_platform_wrlinux,multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv
+# platform = multi_platform_wrlinux,multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv,multi_platform_sle
 # reboot = false
 # strategy = unknown
 # complexity = low

diff --git a/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/rule.yml b/linux_os/guide/system/accounts/accounts-banners/banner_etc_motd/rule.yml
@@ -1,6 +1,6 @@
 documentation_complete: true
 
-prodtype: fedora,ol7,ol8,rhel7,rhel8,rhv4,sle15,wrlinux1019
+prodtype: fedora,ol7,ol8,rhel7,rhel8,rhv4,sle15,wrlinux1019,sle12
 
 title: 'Modify the System Message of the Day Banner'
 
@@ -51,10 +51,14 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-83394-7
     cce@rhel8: CCE-83496-0
+    cce@sle12: CCE-83025-7
 
 references:
     cis@rhel8: 1.8.1.1
-
+    stigid@sle12: SLES-12-010030
+    srg@sle12: SRG-OS-000023-GPOS-00006
+    disa@sle12: CCI-000048
+    nist@sle12: AC-8(a),AC-8.1(ii)
 
 ocil_clause: 'it does not display the required banner'
 

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -16,9 +16,11 @@ selections:
     - disable_ctrlaltdel_reboot
     - sshd_enable_x11_forwarding
     - gnome_gdm_disable_automatic_login
+    - no_user_host_based_files
+    - banner_etc_motd
     - accounts_no_uid_except_zero
     - no_user_host_based_files
     - no_user_host_based_files
     - package_audit_installed
     - service_auditd_enabled
-    - auditd_data_retention_space_left
+    - auditd_data_retention_space_left