diff --git a/components/chrony.yml b/components/chrony.yml index 84e3b022e73..ca380358021 100644 --- a/components/chrony.yml +++ b/components/chrony.yml @@ -13,3 +13,7 @@ rules: - package_chrony_installed - service_chronyd_enabled - chrony_set_nts +- chronyd_client_only +- chronyd_no_chronyc_network +- chronyd_or_ntpd_specify_multiple_servers +- chronyd_sync_clock diff --git a/linux_os/guide/services/ntp/chronyd_client_only/oval/shared.xml b/linux_os/guide/services/ntp/chronyd_client_only/oval/shared.xml index 2019822160e..c70c97d84bf 100644 --- a/linux_os/guide/services/ntp/chronyd_client_only/oval/shared.xml +++ b/linux_os/guide/services/ntp/chronyd_client_only/oval/shared.xml @@ -2,8 +2,7 @@ {{{ oval_metadata("Configure the port setting in " ~ chrony_conf_path ~ " to disable server operation.") }}} - - + diff --git a/linux_os/guide/services/ntp/chronyd_client_only/rule.yml b/linux_os/guide/services/ntp/chronyd_client_only/rule.yml index 815a755204b..b37e8c606f5 100644 --- a/linux_os/guide/services/ntp/chronyd_client_only/rule.yml +++ b/linux_os/guide/services/ntp/chronyd_client_only/rule.yml @@ -15,6 +15,7 @@ rationale: |- severity: low +platform: package[chrony] identifiers: cce@rhcos4: CCE-82465-6 diff --git a/linux_os/guide/services/ntp/chronyd_no_chronyc_network/oval/shared.xml b/linux_os/guide/services/ntp/chronyd_no_chronyc_network/oval/shared.xml index 0bf836e5d0a..362b01e0425 100644 --- a/linux_os/guide/services/ntp/chronyd_no_chronyc_network/oval/shared.xml +++ b/linux_os/guide/services/ntp/chronyd_no_chronyc_network/oval/shared.xml @@ -2,8 +2,7 @@ {{{ oval_metadata("Configure the cmdport setting in " ~ chrony_conf_path ~ " to disable chronyc management connections over network.") }}} - - + diff --git a/linux_os/guide/services/ntp/chronyd_no_chronyc_network/rule.yml b/linux_os/guide/services/ntp/chronyd_no_chronyc_network/rule.yml index 5dd6dcdd942..7a926f6fe97 100644 --- a/linux_os/guide/services/ntp/chronyd_no_chronyc_network/rule.yml +++ b/linux_os/guide/services/ntp/chronyd_no_chronyc_network/rule.yml @@ -14,6 +14,7 @@ rationale: |- severity: low +platform: package[chrony] identifiers: cce@rhcos4: CCE-82466-4 diff --git a/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/bash/shared.sh b/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/bash/shared.sh index f82c5018ec4..d5d78353406 100644 --- a/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/bash/shared.sh +++ b/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/bash/shared.sh @@ -1,4 +1,4 @@ -# platform = Red Hat Enterprise Linux 8,Red Hat Virtualization 4,multi_platform_fedora,multi_platform_ol,multi_platform_sle +# platform = multi_platform_rhel,Red Hat Virtualization 4,multi_platform_fedora,multi_platform_ol,multi_platform_sle {{{ bash_instantiate_variables("var_multiple_time_servers") }}} diff --git a/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/oval/shared.xml b/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/oval/shared.xml index 13de3f2bd50..70242d466c2 100644 --- a/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/oval/shared.xml +++ b/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/oval/shared.xml @@ -3,14 +3,8 @@ {{{ oval_metadata("Multiple remote chronyd or ntpd NTP Servers for time synchronization should be specified (and dependencies are met)") }}} - - - - - - - - + + diff --git a/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/rule.yml b/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/rule.yml index 29c44ddcba5..3b1be8ca0d5 100644 --- a/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/rule.yml +++ b/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_multiple_servers/rule.yml @@ -86,6 +86,7 @@ rationale: |- severity: medium +platform: package[chrony] or package[ntp] identifiers: cce@rhcos4: CCE-82685-9 diff --git a/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_remote_server/oval/shared.xml b/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_remote_server/oval/shared.xml index d8aebe036ce..b016c5e8400 100644 --- a/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_remote_server/oval/shared.xml +++ b/linux_os/guide/services/ntp/chronyd_or_ntpd_specify_remote_server/oval/shared.xml @@ -3,14 +3,8 @@ {{{ oval_metadata("A remote chronyd or ntpd NTP Server for time synchronization should be specified (and dependencies are met)") }}} - - - - - - - - + + diff --git a/linux_os/guide/services/ntp/chronyd_sync_clock/rule.yml b/linux_os/guide/services/ntp/chronyd_sync_clock/rule.yml index 8f6959a207c..d662be9d67c 100644 --- a/linux_os/guide/services/ntp/chronyd_sync_clock/rule.yml +++ b/linux_os/guide/services/ntp/chronyd_sync_clock/rule.yml @@ -21,6 +21,8 @@ rationale: |- severity: medium +platform: package[chrony] + references: disa: CCI-002046,CCI-004926 srg: SRG-OS-000356-GPOS-00144