Merge pull request ComplianceAsCode#12337 from rumch-se/rules_used_te…

…mplate_service_disabled_update_for_slem Updated rules based on template service_disabled to support slem
rumch-se · Aug 29, 2024 · ed44672 · ed44672
2 parents c4a694e + 601dbdf
commit ed44672
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 6 deletions.
diff --git a/controls/stig_slmicro5.yml b/controls/stig_slmicro5.yml
@@ -73,8 +73,9 @@ controls:
       levels:
           - medium
       title: SLEM 5 kernel core dumps must be disabled unless needed.
-      rules: []
-      status: pending
+      rules: 
+          - service_kdump_disabled
+      status: automated
 
     - id: SLEM-05-213020
       levels:
@@ -213,8 +214,9 @@ controls:
       levels:
           - medium
       title: SLEM 5 must disable the file system automounter unless required.
-      rules: []
-      status: pending
+      rules: 
+          - service_autofs_disabled
+      status: automated
 
     - id: SLEM-05-232010
       levels:

diff --git a/linux_os/guide/services/base/service_kdump_disabled/rule.yml b/linux_os/guide/services/base/service_kdump_disabled/rule.yml
@@ -29,6 +29,7 @@ identifiers:
     cce@rhel10: CCE-88407-2
     cce@sle12: CCE-83105-7
     cce@sle15: CCE-85638-5
+    cce@slmicro5: CCE-93773-0
 
 references:
     cis-csc: 11,12,14,15,3,8,9

diff --git a/linux_os/guide/system/permissions/mounting/service_autofs_disabled/rule.yml b/linux_os/guide/system/permissions/mounting/service_autofs_disabled/rule.yml
@@ -30,6 +30,7 @@ identifiers:
     cce@rhel10: CCE-88947-7
     cce@sle12: CCE-83070-3
     cce@sle15: CCE-83278-2
+    cce@slmicro5: CCE-93772-2
 
 references:
     cis-csc: 1,12,15,16,5

diff --git a/shared/references/cce-slmicro5-avail.txt b/shared/references/cce-slmicro5-avail.txt
@@ -23,8 +23,6 @@ CCE-93766-4
 CCE-93767-2
 CCE-93770-6
 CCE-93771-4
-CCE-93772-2
-CCE-93773-0
 CCE-93774-8
 CCE-93775-5
 CCE-93776-3