Skip to content

Commit 53fa626

Browse files
committed
Fix component rule mapping
1 parent 38c2994 commit 53fa626

5 files changed

Lines changed: 8 additions & 1 deletion

File tree

components/bash.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@ packages:
33
- bash
44
rules:
55
- accounts_umask_etc_bashrc
6+
- file_permission_user_bash_history
67
- accounts_umask_etc_csh_cshrc
78
- accounts_umask_etc_profile
89
- accounts_umask_root

components/krb5.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,9 +3,11 @@ groups:
33
name: krb5
44
packages:
55
- krb5
6+
- krb5-libs
67
- krb5-server
78
- krb5-workstation
89
rules:
10+
- configure_kerberos_crypto_policy
911
- kerberos_disable_no_keytab
1012
- package_krb5-server_removed
1113
- package_krb5-workstation_removed

components/openssh.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -94,6 +94,8 @@ rules:
9494
- sshd_use_strong_rng
9595
- sshd_x11_use_localhost
9696
- sshd_include_crypto_policy
97+
- harden_sshd_ciphers_openssh_conf_crypto_policy
9798
- harden_sshd_crypto_policy
99+
- harden_sshd_macs_openssh_conf_crypto_policy
98100
templates:
99101
- sshd_lineinfile

components/openssl.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,5 +4,7 @@ name: openssl
44
packages:
55
- openssl
66
rules:
7+
- configure_openssl_crypto_policy
8+
- configure_openssl_tls_crypto_policy
79
- only_allow_dod_certs
810
- only_allow_specific_certs

components/pam.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -112,6 +112,7 @@ rules:
112112
- ensure_root_password_configured
113113
- ensure_shadow_group_empty
114114
- ensure_sudo_group_restricted
115+
- file_etc_security_opasswd
115116
- file_groupowner_etc_issue
116117
- file_groupowner_etc_issue_net
117118
- file_groupowner_etc_motd
@@ -121,7 +122,6 @@ rules:
121122
- file_owner_etc_motd
122123
- file_ownership_home_directories
123124
- file_ownership_lastlog
124-
- file_permission_user_bash_history
125125
- file_permissions_etc_issue
126126
- file_permissions_etc_issue_net
127127
- file_permissions_etc_motd

0 commit comments

Comments
 (0)