Rework PR 8977 - NginX - Add new sca files for MS IIS, MongoDB 3.6, Nginx, SQL Server and SLES

[72nomada]

Related PR
#8977

Description

This PR reworks the changes added in the previous #8977

The effected changes were:

• Reordered the ID of the checks to make them continuous.
• Fixed wrongly implemented checks.
• Added consistency to indexation.
• Fixed YML format.

After these changes, another iteration will be needed to add the missing checks.

SCA Checks

Syntax and semantic

• a) ID of each policy must be contiguous.
• b) The order and format set in Documentation must be respected.
• c) YML must be valid to avoid errors.

Content

• a) Compare each check with its analogue from CIS Benchmark.
• b) Try to maintain each rule as similar as possible with the Audit section from the CIS check.
• c) Check that the commands provide the expected output.
• d) When a failure is discovered, check similar policies to avoid repetition of the issue.

Unit testing

• a) Output from agent.log after the SCA scan and a raw output of the result of the checks.

Tests results

Analysisd (server or local)

analysisd.debug=2

Auth daemon debug (server)

authd.debug=0

Exec daemon debug (server, local, or Unix agent)

execd.debug=0

Monitor daemon debug (server, local, or Unix agent)

monitord.debug=0

Log collector (server, local or Unix agent)

logcollector.debug=0

Integrator daemon debug (server, local or Unix agent)

integrator.debug=0

Unix agentd

agent.debug=2

Deployment

• a) If the policy it's new, it must be added to the sca.files templates.
• b) If the OS has many supported SCA policies, a policy must be set as default policy. (as example)