Add rule accounts_password_set_max_life_existing to sle micro 5 stig …

…profile
ComplianceAsCode · Aug 12, 2024 · 8452d72 · 8452d72
1 parent f32b34f
commit 8452d72
Show file tree

Hide file tree

Showing 5 changed files with 7 additions and 5 deletions.
diff --git a/controls/stig_slmicro5.yml b/controls/stig_slmicro5.yml
@@ -1090,8 +1090,10 @@ controls:
       levels:
           - medium
       title: SLEM 5 must employ user passwords with a maximum lifetime of 60 days.
-      rules: []
-      status: pending
+      rules:
+          - accounts_password_set_max_life_existing
+          - var_accounts_maximum_age_login_defs=60
+      status: automated
 
     - id: SLEM-05-611075
       levels:

diff --git a/...strictions/password_expiration/accounts_password_set_max_life_existing/ansible/shared.yml b/...strictions/password_expiration/accounts_password_set_max_life_existing/ansible/shared.yml
@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel,multi_platform_sle,multi_platform_ol
+# platform = multi_platform_rhel,multi_platform_sle,multi_platform_slmicro,multi_platform_ol
 # reboot = false
 # strategy = restrict
 # complexity = low

diff --git a/...s-restrictions/password_expiration/accounts_password_set_max_life_existing/bash/shared.sh b/...s-restrictions/password_expiration/accounts_password_set_max_life_existing/bash/shared.sh
@@ -1,4 +1,4 @@
-# platform = Red Hat Virtualization 4,multi_platform_fedora,multi_platform_ol,multi_platform_rhel,multi_platform_sle,multi_platform_ubuntu
+# platform = Red Hat Virtualization 4,multi_platform_fedora,multi_platform_ol,multi_platform_rhel,multi_platform_sle,multi_platform_slmicro,multi_platform_ubuntu
 # reboot = false
 # strategy = restrict
 # complexity = low

diff --git a/...ccounts-restrictions/password_expiration/accounts_password_set_max_life_existing/rule.yml b/...ccounts-restrictions/password_expiration/accounts_password_set_max_life_existing/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel10: CCE-87137-6
     cce@sle12: CCE-83041-4
     cce@sle15: CCE-85571-8
+    cce@slmicro5: CCE-93686-4
 
 references:
     cis@sle12: 5.4.1.2

diff --git a/shared/references/cce-slmicro5-avail.txt b/shared/references/cce-slmicro5-avail.txt
@@ -23,7 +23,6 @@ CCE-93673-2
 CCE-93674-0
 CCE-93675-7
 CCE-93676-5
-CCE-93686-4
 CCE-93687-2
 CCE-93688-0
 CCE-93689-8