Merge pull request ComplianceAsCode#11582 from rumch-se/HIPAA_profile…

…_update HIPAA profile for SLE 15 - update
a-skr · Feb 13, 2024 · 1c86e52 · 1c86e52
2 parents 89a8eda + c3156a7
commit 1c86e52
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 0 deletions.
diff --git a/linux_os/guide/system/auditing/package_audit-audispd-plugins_installed/rule.yml b/linux_os/guide/system/auditing/package_audit-audispd-plugins_installed/rule.yml
@@ -18,6 +18,7 @@ ocil_clause: 'the package is not installed'
 
 references:
     disa: CCI-001851
+    hipaa: 164.308(a)(1)(ii)(D),164.308(a)(5)(ii)(C),164.310(a)(2)(iv),164.310(d)(2)(iii),164.312(b)
     nist@sle12: AU-4(1)
     pcidss: Req-10.5.3
     pcidss4: "10.3.3"

diff --git a/linux_os/guide/system/auditing/package_audit_installed/rule.yml b/linux_os/guide/system/auditing/package_audit_installed/rule.yml
@@ -22,6 +22,7 @@ references:
     cis@ubuntu2004: 4.1.1.1
     cis@ubuntu2204: 4.1.1.1
     disa: CCI-000130,CCI-000131,CCI-000132,CCI-000133,CCI-000134,CCI-000135,CCI-000154,CCI-000158,CCI-000172,CCI-001464,CCI-001487,CCI-001814,CCI-001875,CCI-001876,CCI-001877,CCI-001878,CCI-001879,CCI-001880,CCI-001881,CCI-001882,CCI-001889,CCI-001914,CCI-002884,CCI-000169
+    hipaa: 164.308(a)(1)(ii)(D),164.308(a)(5)(ii)(C),164.310(a)(2)(iv),164.310(d)(2)(iii),164.312(b)
     nerc-cip: CIP-004-6 R3.3,CIP-007-3 R6.5
     nist: AC-7(a),AU-7(1),AU-7(2),AU-14,AU-12(2),AU-2(a),CM-6(a)
     nist@sle12: AU-7(a),AU-7(b),AU-8(b),AU-12.1(iv),AU-12(3),AU-12(c),CM-5(1)

diff --git a/products/sle15/profiles/hipaa.profile b/products/sle15/profiles/hipaa.profile
@@ -36,6 +36,8 @@ selections:
     - sshd_disable_empty_passwords
     - sshd_disable_root_login
     - no_rsh_trust_files
+    - package_audit_installed
+    - package_audit-audispd-plugins_installed
     - package_talk_removed
     - package_telnet_removed
     - package_telnet-server_removed