Include CCEs in rules selected by CIS RHEL9 v2.0.0

Signed-off-by: Marcus Burghardt <[email protected]>
ComplianceAsCode · Jun 14, 2024 · b2469fe · b2469fe
1 parent e04b264
commit b2469fe
Show file tree

Hide file tree

Showing 13 changed files with 12 additions and 11 deletions.
diff --git a/linux_os/guide/auditing/package_audit-libs_installed/rule.yml b/linux_os/guide/auditing/package_audit-libs_installed/rule.yml
@@ -17,6 +17,7 @@ severity: medium
 
 identifiers:
     cce@rhel7: CCE-86531-1
+    cce@rhel9: CCE-86772-1
     cce@sle12: CCE-92320-1
     cce@sle15: CCE-92478-7
 

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/rule.yml
@@ -48,6 +48,7 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-27295-5
     cce@rhel8: CCE-81032-5
+    cce@rhel9: CCE-86767-1
     cce@sle12: CCE-83181-8
     cce@sle15: CCE-91337-6
 

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_kex/rule.yml
@@ -20,6 +20,7 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-86090-8
     cce@rhel8: CCE-86518-8
+    cce@rhel9: CCE-86768-9
     cce@sle12: CCE-92339-1
     cce@sle15: CCE-92626-1
 

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_macs/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_strong_macs/rule.yml
@@ -21,6 +21,7 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-82364-1
     cce@rhel8: CCE-86504-8
+    cce@rhel9: CCE-86769-7
     cce@sle12: CCE-92280-7
     cce@sle15: CCE-91396-2
 

diff --git a/...ounts/accounts-restrictions/account_expiration/var_account_disable_post_pw_expiration.var b/...ounts/accounts-restrictions/account_expiration/var_account_disable_post_pw_expiration.var
@@ -14,6 +14,7 @@ options:
     30: 30
     35: 35
     40: 40
+    45: 45
     60: 60
     90: 90
     default: 35
diff --git a/linux_os/guide/system/logging/journald/package_systemd-journal-remote_installed/rule.yml b/linux_os/guide/system/logging/journald/package_systemd-journal-remote_installed/rule.yml
@@ -18,6 +18,7 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-87415-6
     cce@rhel8: CCE-86467-8
+    cce@rhel9: CCE-86760-6
 
 references:
     cis@ubuntu2204: 4.2.1.1.1

diff --git a/...ide/system/network/network-wireless/wireless_software/service_bluetooth_disabled/rule.yml b/...ide/system/network/network-wireless/wireless_software/service_bluetooth_disabled/rule.yml
@@ -18,6 +18,7 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-27328-4
     cce@rhel8: CCE-87231-7
+    cce@rhel9: CCE-86761-4
 
 references:
     cis-csc: 11,12,14,15,3,8,9

diff --git a/.../permissions/files/permissions_important_account_files/file_etc_security_opasswd/rule.yml b/.../permissions/files/permissions_important_account_files/file_etc_security_opasswd/rule.yml
@@ -16,6 +16,7 @@ severity: medium
 identifiers:
     cce@rhel7: CCE-87198-8
     cce@rhel8: CCE-86140-1
+    cce@rhel9: CCE-86762-2
     cce@sle12: CCE-83172-7
     cce@sle15: CCE-85572-6
 

diff --git a/linux_os/guide/system/permissions/mounting/kernel_module_freevxfs_disabled/rule.yml b/linux_os/guide/system/permissions/mounting/kernel_module_freevxfs_disabled/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhcos4: CCE-82713-9
     cce@rhel7: CCE-80138-1
     cce@rhel8: CCE-86615-2
+    cce@rhel9: CCE-86763-0
 
 references:
     cis-csc: 11,14,3,9

diff --git a/linux_os/guide/system/permissions/mounting/kernel_module_hfs_disabled/rule.yml b/linux_os/guide/system/permissions/mounting/kernel_module_hfs_disabled/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhcos4: CCE-82714-7
     cce@rhel7: CCE-80140-7
     cce@rhel8: CCE-86616-0
+    cce@rhel9: CCE-86764-8
 
 references:
     cis-csc: 11,14,3,9

diff --git a/linux_os/guide/system/permissions/mounting/kernel_module_hfsplus_disabled/rule.yml b/linux_os/guide/system/permissions/mounting/kernel_module_hfsplus_disabled/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhcos4: CCE-82715-4
     cce@rhel7: CCE-80141-5
     cce@rhel8: CCE-86617-8
+    cce@rhel9: CCE-86765-5
 
 references:
     cis-csc: 11,14,3,9

diff --git a/linux_os/guide/system/permissions/mounting/kernel_module_jffs2_disabled/rule.yml b/linux_os/guide/system/permissions/mounting/kernel_module_jffs2_disabled/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhcos4: CCE-82716-2
     cce@rhel7: CCE-80139-9
     cce@rhel8: CCE-86618-6
+    cce@rhel9: CCE-86766-3
 
 references:
     cis-csc: 11,14,3,9

diff --git a/shared/references/cce-redhat-avail.txt b/shared/references/cce-redhat-avail.txt
@@ -247,17 +247,6 @@ CCE-86750-7
 CCE-86751-5
 CCE-86752-3
 CCE-86753-1
-CCE-86760-6
-CCE-86761-4
-CCE-86762-2
-CCE-86763-0
-CCE-86764-8
-CCE-86765-5
-CCE-86766-3
-CCE-86767-1
-CCE-86768-9
-CCE-86769-7
-CCE-86772-1
 CCE-86773-9
 CCE-86774-7
 CCE-86775-4
-Original file line number
+Diff line change
@@ Expand Up / @@ -14,6 +14,7 @@ options: @@
 : 30
 : 35
 : 40
+: 45
 : 60
 : 90
         default: 35