Skip to content

Commit d6041d0

Browse files
committed
remove irrelevant rules from rhel8 and rhel9 pci-dss profile
including profile stability test data
1 parent b267a6e commit d6041d0

File tree

3 files changed

+11
-4
lines changed

3 files changed

+11
-4
lines changed

products/rhel8/profiles/pci-dss.profile

+4
Original file line numberDiff line numberDiff line change
@@ -34,3 +34,7 @@ selections:
3434
- '!set_loopback_traffic'
3535
- '!service_ntpd_enabled'
3636
- '!timer_logrotate_enabled'
37+
- '!package_talk_removed'
38+
- '!package_talk-server_removed'
39+
- '!package_rsh_removed'
40+
- '!package_rsh-server_removed'

products/rhel9/profiles/pci-dss.profile

+7
Original file line numberDiff line numberDiff line change
@@ -36,3 +36,10 @@ selections:
3636
- '!set_ipv6_loopback_traffic'
3737
- '!set_loopback_traffic'
3838
- '!service_ntpd_enabled'
39+
- '!package_ypserv_removed'
40+
- '!package_ypbind_removed'
41+
- '!package_talk_removed'
42+
- '!package_talk-server_removed'
43+
- '!package_xinetd_removed'
44+
- '!package_rsh_removed'
45+
- '!package_rsh-server_removed'

tests/data/profile_stability/rhel8/pci-dss.profile

-4
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,6 @@ selections:
6565
- file_owner_etc_shadow
6666
- accounts_passwords_pam_faillock_deny
6767
- accounts_password_all_shadowed
68-
- package_talk-server_removed
6968
- accounts_root_gid_zero
7069
- selinux_state
7170
- audit_rules_time_clock_settime
@@ -85,7 +84,6 @@ selections:
8584
- network_sniffer_disabled
8685
- audit_rules_session_events
8786
- package_dhcp_removed
88-
- package_rsh_removed
8987
- file_owner_cron_d
9088
- sshd_set_idle_timeout
9189
- file_groupowner_cron_weekly
@@ -213,7 +211,6 @@ selections:
213211
- auditd_data_retention_space_left_action
214212
- rsyslog_files_permissions
215213
- file_owner_cron_monthly
216-
- package_talk_removed
217214
- file_permissions_cron_daily
218215
- selinux_confinement_of_daemons
219216
- sysctl_net_ipv4_conf_all_send_redirects
@@ -245,7 +242,6 @@ selections:
245242
- rpm_verify_hashes
246243
- file_owner_cron_allow
247244
- file_permissions_sshd_pub_key
248-
- package_rsh-server_removed
249245
- dconf_gnome_disable_automount
250246
- gid_passwd_group_same
251247
- package_xinetd_removed

0 commit comments

Comments
 (0)