Revert "remove not needed controls from cis profiles - fix chronyd co…

…nf by pointing to aws servers" This reverts commit e745325.
ComplianceAsCode · Jun 3, 2024 · 4d98497 · 4d98497
1 parent 6a413d4
commit 4d98497
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 1 deletion.
diff --git a/build/.gitkeep b/build/.gitkeep
diff --git a/controls/cis_al2023.yml b/controls/cis_al2023.yml
@@ -550,7 +550,7 @@ controls:
     rules:
       - chronyd_specify_remote_server
       - chronyd_run_as_chrony_user
-      - var_multiple_time_servers=amazon
+      - var_multiple_time_servers=rhel
 
   - id: 2.2.1
     title: Ensure xorg-x11-server-common is not installed (Automated)

diff --git a/products/al2023/profiles/cis.profile b/products/al2023/profiles/cis.profile
@@ -19,3 +19,6 @@ description: |-
 
 selections:
     - cis_al2023:all:l2_server
+    - '!file_ownership_home_directories'
+    - '!group_unique_name'
+    - '!file_owner_at_allow'
diff --git a/products/al2023/profiles/cis_server_l1.profile b/products/al2023/profiles/cis_server_l1.profile
@@ -19,3 +19,6 @@ description: |-
 
 selections:
     - cis_al2023:all:l1_server
+    - '!file_ownership_home_directories'
+    - '!group_unique_name'
+    - '!file_owner_at_allow'