Merge pull request #12453 from vojtapolasek/fix_cis_rhel9_tiny_issues

Two CIS RHEL 9 enhancements
ComplianceAsCode · Oct 3, 2024 · 3efbf63 · 3efbf63
2 parents 2facea0 + 19d3cff
commit 3efbf63
Show file tree

Hide file tree

Showing 5 changed files with 9 additions and 2 deletions.
diff --git a/controls/cis_rhel9.yml b/controls/cis_rhel9.yml
@@ -602,7 +602,10 @@ controls:
       - l1_server
       - l1_workstation
     status: manual
-
+    notes: |-        
+        User should manually ensure that CVE-2023-48795 is addressed.
+        This is not automated and it might be difficult to automate actually.
+        Therefore, keeping this control as manual.
   - id: 1.6.7
     title: Ensure system wide crypto policy disables EtM for ssh (Automated)
     levels:
@@ -1067,7 +1070,7 @@ controls:
       - l1_server
       - l1_workstation
     status: automated
-    related_rules:
+    rules:
       - package_chrony_installed
 
   - id: 2.3.2

diff --git a/tests/data/profile_stability/rhel9/cis.profile b/tests/data/profile_stability/rhel9/cis.profile
@@ -285,6 +285,7 @@ selections:
 - package_audit-libs_installed
 - package_audit_installed
 - package_bind_removed
+- package_chrony_installed
 - package_cyrus-imapd_removed
 - package_dhcp_removed
 - package_dnsmasq_removed

diff --git a/tests/data/profile_stability/rhel9/cis_server_l1.profile b/tests/data/profile_stability/rhel9/cis_server_l1.profile
@@ -201,6 +201,7 @@ selections:
 - no_shelllogin_for_systemaccounts
 - package_aide_installed
 - package_bind_removed
+- package_chrony_installed
 - package_cyrus-imapd_removed
 - package_dhcp_removed
 - package_dnsmasq_removed

diff --git a/tests/data/profile_stability/rhel9/cis_workstation_l1.profile b/tests/data/profile_stability/rhel9/cis_workstation_l1.profile
@@ -198,6 +198,7 @@ selections:
 - no_shelllogin_for_systemaccounts
 - package_aide_installed
 - package_bind_removed
+- package_chrony_installed
 - package_cyrus-imapd_removed
 - package_dhcp_removed
 - package_dnsmasq_removed

diff --git a/tests/data/profile_stability/rhel9/cis_workstation_l2.profile b/tests/data/profile_stability/rhel9/cis_workstation_l2.profile
@@ -285,6 +285,7 @@ selections:
 - package_audit-libs_installed
 - package_audit_installed
 - package_bind_removed
+- package_chrony_installed
 - package_cyrus-imapd_removed
 - package_dhcp_removed
 - package_dnsmasq_removed