Updated rules based on template service_disabled to support slem

rumch-se · Aug 26, 2024 · 5268c76 · 5268c76
1 parent f7d955d
commit 5268c76
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 5 deletions.
diff --git a/controls/stig_slmicro5.yml b/controls/stig_slmicro5.yml
@@ -72,8 +72,9 @@ controls:
       levels:
           - medium
       title: SLEM 5 kernel core dumps must be disabled unless needed.
-      rules: []
-      status: pending
+      rules: 
+          - service_kdump_disabled
+      status: automated
 
     - id: SLEM-05-213020
       levels:
@@ -210,8 +211,9 @@ controls:
       levels:
           - medium
       title: SLEM 5 must disable the file system automounter unless required.
-      rules: []
-      status: pending
+      rules: 
+          - service_autofs_disabled
+      status: automated
 
     - id: SLEM-05-232010
       levels:

diff --git a/linux_os/guide/services/base/service_kdump_disabled/rule.yml b/linux_os/guide/services/base/service_kdump_disabled/rule.yml
@@ -29,6 +29,7 @@ identifiers:
     cce@rhel10: CCE-88407-2
     cce@sle12: CCE-83105-7
     cce@sle15: CCE-85638-5
+    cce@slmicro5: CCE-93773-0
 
 references:
     cis-csc: 11,12,14,15,3,8,9

diff --git a/linux_os/guide/system/permissions/mounting/service_autofs_disabled/rule.yml b/linux_os/guide/system/permissions/mounting/service_autofs_disabled/rule.yml
@@ -30,6 +30,7 @@ identifiers:
     cce@rhel10: CCE-88947-7
     cce@sle12: CCE-83070-3
     cce@sle15: CCE-83278-2
+    cce@slmicro5: CCE-93772-2
 
 references:
     cis-csc: 1,12,15,16,5

diff --git a/shared/references/cce-slmicro5-avail.txt b/shared/references/cce-slmicro5-avail.txt
@@ -65,7 +65,6 @@ CCE-93768-0
 CCE-93769-8
 CCE-93770-6
 CCE-93771-4
-CCE-93772-2
 CCE-93773-0
 CCE-93774-8
 CCE-93775-5