From 54bd2d1f4f47046d8043f4a89637339e1ed22419 Mon Sep 17 00:00:00 2001 From: mbelur Date: Fri, 11 Dec 2020 00:46:39 +0100 Subject: [PATCH] Add rules for SLES-12-010340 --- .../account_disable_post_pw_expiration/ansible/shared.yml | 2 +- .../account_disable_post_pw_expiration/rule.yml | 4 +++- sle12/profiles/stig.profile | 1 + 3 files changed, 5 insertions(+), 2 deletions(-) diff --git a/linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_post_pw_expiration/ansible/shared.yml b/linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_post_pw_expiration/ansible/shared.yml index 11a6bc546729..74598bc7e0ce 100644 --- a/linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_post_pw_expiration/ansible/shared.yml +++ b/linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_post_pw_expiration/ansible/shared.yml @@ -1,4 +1,4 @@ -# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv +# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv,multi_platform_sle # reboot = false # strategy = restrict # complexity = low diff --git a/linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_post_pw_expiration/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_post_pw_expiration/rule.yml index b442ff3c0a36..add8ac0dbd7b 100644 --- a/linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_post_pw_expiration/rule.yml +++ b/linux_os/guide/system/accounts/accounts-restrictions/account_expiration/account_disable_post_pw_expiration/rule.yml @@ -1,6 +1,6 @@ documentation_complete: true -prodtype: fedora,rhcos4,ol7,ol8,rhel7,rhel8,rhv4,wrlinux1019 +prodtype: fedora,rhcos4,ol7,ol8,rhel7,rhel8,rhv4,wrlinux1019,sle12 title: 'Set Account Expiration Following Inactivity' @@ -28,6 +28,7 @@ identifiers: cce@rhel7: CCE-27355-7 cce@rhel8: CCE-80954-1 cce@rhcos4: CCE-82695-8 + cce@sle12: CCE-83051-3 references: stigid@ol7: OL07-00-010310 @@ -40,6 +41,7 @@ references: srg: SRG-OS-000118-GPOS-00060 vmmsrg: SRG-OS-000003-VMM-000030,SRG-OS-000118-VMM-000590 stigid@rhel7: RHEL-07-010310 + stigid@sle12: SLES-12-010340 isa-62443-2013: 'SR 1.1,SR 1.10,SR 1.2,SR 1.3,SR 1.4,SR 1.5,SR 1.7,SR 1.8,SR 1.9,SR 2.1,SR 6.2' isa-62443-2009: 4.3.3.2.2,4.3.3.5.1,4.3.3.5.2,4.3.3.6.1,4.3.3.6.2,4.3.3.6.3,4.3.3.6.4,4.3.3.6.5,4.3.3.6.6,4.3.3.6.7,4.3.3.6.8,4.3.3.6.9,4.3.3.7.2,4.3.3.7.3,4.3.3.7.4 cobit5: DSS01.03,DSS03.05,DSS05.04,DSS05.05,DSS05.07,DSS05.10,DSS06.03,DSS06.10 diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile index 3f00b9553173..d3f375b63a0f 100644 --- a/sle12/profiles/stig.profile +++ b/sle12/profiles/stig.profile @@ -29,3 +29,4 @@ selections: - auditd_data_retention_space_left - auditd_data_retention_action_mail_acct - set_password_hashing_algorithm_logindefs + - account_disable_post_pw_expiration