Merge pull request #12697 from Mab879/clean_up_os_rules

Remove old rules from RHEL 10 profiles
ComplianceAsCode · Dec 11, 2024 · aa76180 · aa76180
2 parents ed8af32 + d044cbc
commit aa76180
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 7 deletions.
diff --git a/controls/cis_rhel10.yml b/controls/cis_rhel10.yml
@@ -3120,6 +3120,5 @@ controls:
       - var_user_initialization_files_regex=all_dotfiles
       - no_forward_files
       - no_netrc_files
-      - no_rsh_trust_files
     related_rules:
       - accounts_users_netrc_file_permissions
diff --git a/controls/hipaa.yml b/controls/hipaa.yml
@@ -344,7 +344,6 @@ controls:
             - package_ypbind_removed
             - package_ypserv_removed
             - service_ypbind_disabled
-            - no_rsh_trust_files
             - package_rsh-server_removed
             - package_rsh_removed
             - service_rexec_disabled
@@ -613,7 +612,6 @@ controls:
             - package_ypbind_removed
             - package_ypserv_removed
             - service_ypbind_disabled
-            - no_rsh_trust_files
             - package_rsh-server_removed
             - package_rsh_removed
             - service_rexec_disabled
@@ -681,7 +679,6 @@ controls:
             - package_ypbind_removed
             - package_ypserv_removed
             - service_ypbind_disabled
-            - no_rsh_trust_files
             - package_rsh-server_removed
             - package_rsh_removed
             - service_rexec_disabled
@@ -878,7 +875,6 @@ controls:
             - package_ypbind_removed
             - package_ypserv_removed
             - service_ypbind_disabled
-            - no_rsh_trust_files
             - package_rsh-server_removed
             - package_rsh_removed
             - service_rexec_disabled
@@ -1646,7 +1642,6 @@ controls:
             - package_ypbind_removed
             - package_ypserv_removed
             - service_ypbind_disabled
-            - no_rsh_trust_files
             - package_rsh-server_removed
             - package_rsh_removed
             - service_rexec_disabled
@@ -1719,7 +1714,6 @@ controls:
             - package_ypbind_removed
             - package_ypserv_removed
             - service_ypbind_disabled
-            - no_rsh_trust_files
             - package_rsh-server_removed
             - package_rsh_removed
             - service_rexec_disabled

diff --git a/products/rhel10/profiles/anssi_bp28_enhanced.profile b/products/rhel10/profiles/anssi_bp28_enhanced.profile
@@ -75,3 +75,5 @@ selections:
     - '!sssd_enable_pam_services'
     - '!sssd_ldap_configure_tls_reqcert'
     - '!sssd_ldap_start_tls'
+    # These rules are no longer relevant
+    - '!prefer_64bit_os'
diff --git a/products/rhel10/profiles/anssi_bp28_high.profile b/products/rhel10/profiles/anssi_bp28_high.profile
@@ -79,3 +79,5 @@ selections:
     - '!sssd_enable_pam_services'
     - '!sssd_ldap_configure_tls_reqcert'
     - '!sssd_ldap_start_tls'
+    # These rules are no longer relevant
+    - '!prefer_64bit_os'