Merge pull request ComplianceAsCode#30 from SUSE/SLES-12-010290

Add rules for SLES-12-010290 STIG
guangyee · Dec 14, 2020 · af47528 · af47528
2 parents 5cea7d3 + 903223d
commit af47528
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/...ccounts-restrictions/password_expiration/accounts_password_set_max_life_existing/rule.yml b/...ccounts-restrictions/password_expiration/accounts_password_set_max_life_existing/rule.yml
@@ -1,6 +1,6 @@
 documentation_complete: true
 
-prodtype: ol7,ol8,rhel7,rhel8,rhv4,wrlinux1019
+prodtype: ol7,ol8,rhel7,rhel8,rhv4,wrlinux1019,sle12
 
 title: 'Set Existing Passwords Maximum Age'
 
@@ -21,6 +21,7 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-80522-6
     cce@rhel8: CCE-82473-0
+    cce@sle12: CCE-83041-4
 
 references:
     stigid@ol7: OL07-00-010260
@@ -29,6 +30,7 @@ references:
     srg: SRG-OS-000076-GPOS-00044
     vmmsrg: SRG-OS-000076-VMM-000430
     stigid@rhel7: RHEL-07-010260
+    stigid@sle12: SLES-12-010290
 
 ocil_clause: 'existing passwords are not configured correctly'
 

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -34,5 +34,6 @@ selections:
     - account_disable_post_pw_expiration
     - accounts_maximum_age_login_defs
     - package_audit-audispd-plugins_installed
-    - accounts_umask_etc_login_defs
+    - accounts_password_set_max_life_existing
     - accounts_password_set_min_life_existing
+    - accounts_umask_etc_login_defs