Merge pull request #11327 from vojtapolasek/remove_stig_ids

Minor modifications to RHEL STIG profiles
ComplianceAsCode · Dec 4, 2023 · f1937a7 · f1937a7
2 parents c1dbfbc + 355ac5f
commit f1937a7
Show file tree

Hide file tree

Showing 4 changed files with 2 additions and 4 deletions.
diff --git a/controls/stig_rhel9.yml b/controls/stig_rhel9.yml
@@ -4114,7 +4114,7 @@ controls:
             - medium
         title: RHEL 9 audit system must protect logon UIDs from unauthorized change.
         rules:
-            - audit_immutable_login_uids
+            - audit_rules_immutable_login_uids
         status: automated
 
     -   id: RHEL-09-654275

diff --git a/.../guide/system/accounts/accounts-pam/password_quality/passwd_system-auth_substack/rule.yml b/.../guide/system/accounts/accounts-pam/password_quality/passwd_system-auth_substack/rule.yml
@@ -19,7 +19,6 @@ references:
     nist: IA-5(1)(a),IA-5(1).1(v),IA-5(1)(a)
     srg: SRG-OS-000069-GPOS-00037
     stigid@ol7: OL07-00-010118
-    stigid@rhel7: RHEL-07-010118
 
 ocil_clause: '/etc/pam.d/passwd does not implement /etc/pam.d/system-auth'
 

diff --git a/...os/guide/system/auditing/auditd_configure_rules/audit_rules_immutable_login_uids/rule.yml b/...os/guide/system/auditing/auditd_configure_rules/audit_rules_immutable_login_uids/rule.yml
@@ -33,6 +33,7 @@ references:
     disa: CCI-000162,CCI-000163,CCI-000164
     srg: SRG-OS-000462-GPOS-00206,SRG-OS-000475-GPOS-00220,SRG-OS-000057-GPOS-00027,SRG-OS-000058-GPOS-00028,SRG-OS-000059-GPOS-00029
     stigid@rhel8: RHEL-08-030122
+    stigid@rhel9: RHEL-09-654270
 
 ocil_clause: 'the system is not configured to make login UIDs immutable'
 

diff --git a/linux_os/guide/system/auditing/policy_rules/audit_immutable_login_uids/rule.yml b/linux_os/guide/system/auditing/policy_rules/audit_immutable_login_uids/rule.yml
@@ -35,8 +35,6 @@ references:
     ospp: FAU_GEN.1.2
     srg: SRG-OS-000462-GPOS-00206,SRG-OS-000475-GPOS-00220,SRG-OS-000057-GPOS-00027,SRG-OS-000058-GPOS-00028,SRG-OS-000059-GPOS-00029,SRG-APP-000121-CTR-000255,SRG-APP-000495-CTR-001235
     stigid@ol8: OL08-00-030122
-    stigid@rhel8: RHEL-08-030122
-    stigid@rhel9: RHEL-09-654270
 
 ocil_clause: 'the file does not exist or the content differs'