Merge branch 'development' into SLES-12-020010

guangyee · Dec 10, 2020 · b885701 · b885701
2 parents b9965fb + 857df44
commit b885701
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/linux_os/guide/system/auditing/package_audit_installed/rule.yml b/linux_os/guide/system/auditing/package_audit_installed/rule.yml
@@ -12,6 +12,7 @@ identifiers:
     cce@rhel7: CCE-81042-4
     cce@rhel8: CCE-81043-2
     cce@rhcos4: CCE-82669-3
+    cce@sle12: CCE-83023-2
 
 ocil_clause: 'the package is not installed'
 
@@ -21,6 +22,10 @@ references:
     srg: SRG-OS-000480-GPOS-00227,SRG-OS-000122-GPOS-00063
     cis@rhel8: 4.1.1.1
     cis@ubuntu2004: 4.1.1.1
+    stigid@sle12: SLES-12-020000
+    srg@sle12: SRG-OS-000337-GPOS-00129,SRG-OS-000348-GPOS-00136,SRG-OS-000349-GPOS-00137,SRG-OS-000350-GPOS-00138,SRG-OS-000351-GPOS-00139,SRG-OS-000352-GPOS-00140,SRG-OS-000353-GPOS-00141,SRG-OS-000354-GPOS-00142,SRG-OS-000358-GPOS-00145,SRG-OS-000359-GPOS-00146,SRG-OS-000365-GPOS-00152,SRG-OS-000474-GPOS-00219,SRG-OS-000475-GPOS-00220
+    disa@sle12: CCI-000172,CCI-001814,CCI-001875,CCI-001877,CCI-001878,CCI-001879,CCI-001880,CCI-001881,CCI-001882,CCI-001889,CCI-001914
+    nist@sle12: AU-7(a),AU-7(b),AU-8(b),AU-12.1(iv),AU-12(3),AU-12(c),CM-5(1)
 
 template:
     name: package_installed

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -15,4 +15,6 @@ selections:
     - sshd_do_not_permit_user_env
     - sshd_enable_x11_forwarding
     - gnome_gdm_disable_automatic_login
-    - service_auditd_enabled
+    - no_user_host_based_files
+    - package_audit_installed
+    - service_auditd_enabled