Add rules for SLES-12-010110

guangyee · Dec 7, 2020 · 823ce0e · 823ce0e
1 parent 531107e
commit 823ce0e
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/linux_os/guide/system/software/sudo/sudo_remove_no_authenticate/rule.yml b/linux_os/guide/system/software/sudo/sudo_remove_no_authenticate/rule.yml
@@ -20,6 +20,7 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-80350-2
     cce@rhel8: CCE-82202-3
+    cce@sle12: CCE-83013-3
 
 references:
     anssi: BP28(R5),BP28(R59)
@@ -29,6 +30,7 @@ references:
     srg: SRG-OS-000373-GPOS-00156,SRG-OS-000373-GPOS-00157,SRG-OS-000373-GPOS-00158
     vsrg: SRG-OS-000373-VMM-001470,SRG-OS-000373-VMM-001480,SRG-OS-000373-VMM-001490
     stigid@rhel7: RHEL-07-010350
+    stigid@sle12: SLES-12-010110
     isa-62443-2013: 'SR 1.1,SR 1.10,SR 1.2,SR 1.3,SR 1.4,SR 1.5,SR 1.7,SR 1.8,SR 1.9'
     isa-62443-2009: 4.3.3.5.1,4.3.3.6.1,4.3.3.6.2,4.3.3.6.3,4.3.3.6.4,4.3.3.6.5,4.3.3.6.6,4.3.3.6.7,4.3.3.6.8,4.3.3.6.9
     cobit5: DSS05.04,DSS05.10,DSS06.03,DSS06.10

diff --git a/linux_os/guide/system/software/sudo/sudo_remove_nopasswd/rule.yml b/linux_os/guide/system/software/sudo/sudo_remove_nopasswd/rule.yml
@@ -21,6 +21,7 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-80351-0
     cce@rhel8: CCE-82197-5
+    cce@sle12: CCE-83012-5
 
 references:
     stigid@ol7: OL07-00-010340
@@ -31,6 +32,7 @@ references:
     srg: SRG-OS-000373-GPOS-00156,SRG-OS-000373-GPOS-00157,SRG-OS-000373-GPOS-00158
     vsrg: SRG-OS-000373-VMM-001470,SRG-OS-000373-VMM-001480,SRG-OS-000373-VMM-001490
     stigid@rhel7: RHEL-07-010340
+    stigid@sle12: SLES-12-010110
     isa-62443-2013: 'SR 1.1,SR 1.10,SR 1.2,SR 1.3,SR 1.4,SR 1.5,SR 1.7,SR 1.8,SR 1.9'
     isa-62443-2009: 4.3.3.5.1,4.3.3.6.1,4.3.3.6.2,4.3.3.6.3,4.3.3.6.4,4.3.3.6.5,4.3.3.6.6,4.3.3.6.7,4.3.3.6.8,4.3.3.6.9
     cobit5: DSS05.04,DSS05.10,DSS06.03,DSS06.10

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -9,3 +9,6 @@ description: |-
 selections:
     - installed_OS_is_vendor_supported
     - security_patches_up_to_date
+    - sudo_remove_nopasswd
+    - sudo_remove_no_authenticate
+