SLES-12-020000: audit package must be installed

guangyee · Dec 9, 2020 · edc56a7 · edc56a7
1 parent c85a0a4
commit edc56a7
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/linux_os/guide/system/auditing/package_audit_installed/rule.yml b/linux_os/guide/system/auditing/package_audit_installed/rule.yml
@@ -12,6 +12,7 @@ identifiers:
     cce@rhel7: CCE-81042-4
     cce@rhel8: CCE-81043-2
     cce@rhcos4: CCE-82669-3
+    cce@sle12: CCE-83023-2
 
 ocil_clause: 'the package is not installed'
 
@@ -21,6 +22,10 @@ references:
     srg: SRG-OS-000480-GPOS-00227,SRG-OS-000122-GPOS-00063
     cis@rhel8: 4.1.1.1
     cis@ubuntu2004: 4.1.1.1
+    stigid@sle12: SLES-12-020000
+    srg@sle12: SRG-OS-000337-GPOS-00129,SRG-OS-000348-GPOS-00136,SRG-OS-000349-GPOS-00137,SRG-OS-000350-GPOS-00138,SRG-OS-000351-GPOS-00139,SRG-OS-000352-GPOS-00140,SRG-OS-000353-GPOS-00141,SRG-OS-000354-GPOS-00142,SRG-OS-000358-GPOS-00145,SRG-OS-000359-GPOS-00146,SRG-OS-000365-GPOS-00152,SRG-OS-000474-GPOS-00219,SRG-OS-000475-GPOS-00220
+    disa@sle12: CCI-000172,CCI-001814,CCI-001875,CCI-001877,CCI-001878,CCI-001879,CCI-001880,CCI-001881,CCI-001882,CCI-001889,CCI-001914
+    nist@sle12: AU-7(a),AU-7(b),AU-8(b),AU-12.1(iv),AU-12(3),AU-12(c),CM-5(1)
 
 template:
     name: package_installed

diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -15,3 +15,4 @@ selections:
     - sshd_do_not_permit_user_env
     - sshd_enable_x11_forwarding
     - gnome_gdm_disable_automatic_login
+    - package_audit_installed