Add rules for SLES-12-010340

guangyee · Dec 10, 2020 · 54bd2d1 · 54bd2d1
1 parent d26d46d
commit 54bd2d1
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/...nts-restrictions/account_expiration/account_disable_post_pw_expiration/ansible/shared.yml b/...nts-restrictions/account_expiration/account_disable_post_pw_expiration/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv
+# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv,multi_platform_sle
 # reboot = false
 # strategy = restrict
 # complexity = low

diff --git a/...unts/accounts-restrictions/account_expiration/account_disable_post_pw_expiration/rule.yml b/...unts/accounts-restrictions/account_expiration/account_disable_post_pw_expiration/rule.yml
@@ -1,6 +1,6 @@
 documentation_complete: true
 
-prodtype: fedora,rhcos4,ol7,ol8,rhel7,rhel8,rhv4,wrlinux1019
+prodtype: fedora,rhcos4,ol7,ol8,rhel7,rhel8,rhv4,wrlinux1019,sle12
 
 title: 'Set Account Expiration Following Inactivity'
 
@@ -28,6 +28,7 @@ identifiers:
     cce@rhel7: CCE-27355-7
     cce@rhel8: CCE-80954-1
     cce@rhcos4: CCE-82695-8
+    cce@sle12: CCE-83051-3
 
 references:
     stigid@ol7: OL07-00-010310
@@ -40,6 +41,7 @@ references:
     srg: SRG-OS-000118-GPOS-00060
     vmmsrg: SRG-OS-000003-VMM-000030,SRG-OS-000118-VMM-000590
     stigid@rhel7: RHEL-07-010310
+    stigid@sle12: SLES-12-010340
     isa-62443-2013: 'SR 1.1,SR 1.10,SR 1.2,SR 1.3,SR 1.4,SR 1.5,SR 1.7,SR 1.8,SR 1.9,SR 2.1,SR 6.2'
     isa-62443-2009: 4.3.3.2.2,4.3.3.5.1,4.3.3.5.2,4.3.3.6.1,4.3.3.6.2,4.3.3.6.3,4.3.3.6.4,4.3.3.6.5,4.3.3.6.6,4.3.3.6.7,4.3.3.6.8,4.3.3.6.9,4.3.3.7.2,4.3.3.7.3,4.3.3.7.4
     cobit5: DSS01.03,DSS03.05,DSS05.04,DSS05.05,DSS05.07,DSS05.10,DSS06.03,DSS06.10

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -29,3 +29,4 @@ selections:
     - auditd_data_retention_space_left
     - auditd_data_retention_action_mail_acct
     - set_password_hashing_algorithm_logindefs
+    - account_disable_post_pw_expiration