update test data

ComplianceAsCode · Oct 4, 2023 · 9bca4a1 · 9bca4a1
1 parent 842605b
commit 9bca4a1
Show file tree

Hide file tree

Showing 30 changed files with 483 additions and 330 deletions.
diff --git a/tests/data/product_stability/alinux2.yml b/tests/data/product_stability/alinux2.yml
@@ -9,10 +9,10 @@ benchmark_id: ALINUX-2
 benchmark_root: ../../linux_os/guide
 chrony_conf_path: /etc/chrony.conf
 cpes:
-- alinux2:
-    check_id: installed_OS_is_alinux2
-    name: cpe:/o:alinux:alibaba_cloud_linux:2
-    title: Alibaba Cloud Linux 2
+  - alinux2:
+      check_id: installed_OS_is_alinux2
+      name: cpe:/o:alinux:alibaba_cloud_linux:2
+      title: Alibaba Cloud Linux 2
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: gdm.d
 faillock_path: /var/run/faillock

diff --git a/tests/data/product_stability/alinux3.yml b/tests/data/product_stability/alinux3.yml
@@ -9,10 +9,10 @@ benchmark_id: ALINUX-3
 benchmark_root: ../../linux_os/guide
 chrony_conf_path: /etc/chrony.conf
 cpes:
-- alinux3:
-    check_id: installed_OS_is_alinux3
-    name: cpe:/o:alinux:alibaba_cloud_linux:3
-    title: Alibaba Cloud Linux 3
+  - alinux3:
+      check_id: installed_OS_is_alinux3
+      name: cpe:/o:alinux:alibaba_cloud_linux:3
+      title: Alibaba Cloud Linux 3
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: gdm.d
 faillock_path: /var/run/faillock

diff --git a/tests/data/product_stability/anolis23.yml b/tests/data/product_stability/anolis23.yml
@@ -0,0 +1,74 @@
+aide_also_checks_audispd: 'yes'
+aide_also_checks_rsyslog: 'no'
+aide_bin_path: /usr/sbin/aide
+aide_conf_path: /etc/aide.conf
+audisp_conf_path: /etc/audit
+auid: 1000
+basic_properties_derived: true
+benchmark_id: ANOLIS-23
+benchmark_root: ../../linux_os/guide
+chrony_conf_path: /etc/chrony.conf
+cpes:
+  - anolis23:
+      check_id: installed_OS_is_anolis23
+      name: cpe:/o:anolis:anolis_os:23
+      title: Anolis OS 23
+cpes_root: ../../shared/applicability
+dconf_gdm_dir: gdm.d
+faillock_path: /var/run/faillock
+full_name: Anolis OS 23
+gid_min: 1000
+groups: {}
+grub2_boot_path: /boot/grub2
+grub2_uefi_boot_path: /boot/grub2
+grub_helper_executable: grubby
+init_system: systemd
+nobody_gid: 65534
+nobody_uid: 65534
+pkg_manager: yum
+pkg_manager_config_file: /etc/yum.conf
+pkg_system: rpm
+platform_package_overrides:
+  aarch64_arch: null
+  grub2: grub2-common
+  login_defs: shadow-utils
+  no_ovirt: null
+  non-uefi: null
+  not_aarch64_arch: null
+  not_s390x_arch: null
+  ovirt: null
+  s390x_arch: null
+  sssd: sssd-common
+  sssd-ldap: null
+  uefi: null
+  zipl: s390utils-base
+product: anolis23
+profiles_root: ./profiles
+reference_uris:
+  anssi: http://www.ssi.gouv.fr/administration/bonnes-pratiques/
+  app-srg: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=application-servers
+  cis-csc: https://www.cisecurity.org/controls/
+  cjis: https://www.fbi.gov/file-repository/cjis-security-policy-v5_5_20160601-2-1.pdf
+  cnss: http://www.cnss.gov/Assets/pdf/CNSSI-1253.pdf
+  cobit5: https://www.isaca.org/resources/cobit
+  cui: http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171.pdf
+  dcid: not_officially_available
+  disa: https://public.cyber.mil/stigs/cci/
+  hipaa: https://www.gpo.gov/fdsys/pkg/CFR-2007-title45-vol1/pdf/CFR-2007-title45-vol1-chapA-subchapC.pdf
+  isa-62443-2009: https://www.isa.org/products/isa-62443-2-1-2009-security-for-industrial-automat
+  isa-62443-2013: https://www.isa.org/products/ansi-isa-62443-3-3-99-03-03-2013-security-for-indu
+  ism: https://www.cyber.gov.au/acsc/view-all-content/ism
+  iso27001-2013: https://www.iso.org/standard/54534.html
+  nerc-cip: https://www.nerc.com/pa/Stand/Standard%20Purpose%20Statement%20DL/US_Standard_One-Stop-Shop.xlsx
+  nist: http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf
+  nist-csf: https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf
+  os-srg: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os
+  ospp: https://www.niap-ccevs.org/Profile/PP.cfm
+  pcidss: https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf
+  pcidss4: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
+  stigid: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
+  stigref: https://public.cyber.mil/stigs/srg-stig-tools/
+sshd_distributed_config: 'false'
+sysctl_remediate_drop_in_file: 'false'
+type: platform
+uid_min: 1000
diff --git a/tests/data/product_stability/anolis8.yml b/tests/data/product_stability/anolis8.yml
@@ -9,10 +9,10 @@ benchmark_id: ANOLIS-8
 benchmark_root: ../../linux_os/guide
 chrony_conf_path: /etc/chrony.conf
 cpes:
-- anolis8:
-    check_id: installed_OS_is_anolis8
-    name: cpe:/o:anolis:anolis_os:8
-    title: Anolis OS 8
+  - anolis8:
+      check_id: installed_OS_is_anolis8
+      name: cpe:/o:anolis:anolis_os:8
+      title: Anolis OS 8
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: gdm.d
 faillock_path: /var/run/faillock

diff --git a/tests/data/product_stability/chromium.yml b/tests/data/product_stability/chromium.yml
@@ -9,10 +9,10 @@ benchmark_id: CHROMIUM
 benchmark_root: ./guide
 chrony_conf_path: /etc/chrony.conf
 cpes:
-- chromium:
-    check_id: installed_app_is_chromium
-    name: cpe:/a:google:chromium-browser
-    title: Google Chromium Browser
+  - chromium:
+      check_id: installed_app_is_chromium
+      name: cpe:/a:google:chromium-browser
+      title: Google Chromium Browser
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: gdm.d
 faillock_path: /var/run/faillock

diff --git a/tests/data/product_stability/debian10.yml b/tests/data/product_stability/debian10.yml
@@ -9,16 +9,16 @@ benchmark_id: DEBIAN-10
 benchmark_root: ../../linux_os/guide
 chrony_conf_path: /etc/chrony/chrony.conf
 cpes:
-- debian10:
-    check_id: installed_OS_is_debian10
-    name: cpe:/o:debian:debian_linux:10
-    title: Debian Linux 10
+  - debian10:
+      check_id: installed_OS_is_debian10
+      name: cpe:/o:debian:debian_linux:10
+      title: Debian Linux 10
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: gdm.d
 faillock_path: /var/run/faillock
 families:
-- debian
-- debian-like
+  - debian
+  - debian-like
 full_name: Debian 10
 gid_min: 1000
 groups: {}

diff --git a/tests/data/product_stability/debian11.yml b/tests/data/product_stability/debian11.yml
@@ -9,16 +9,16 @@ benchmark_id: DEBIAN-11
 benchmark_root: ../../linux_os/guide
 chrony_conf_path: /etc/chrony.conf
 cpes:
-- debian11:
-    check_id: installed_OS_is_debian11
-    name: cpe:/o:debian:debian_linux:11
-    title: Debian Linux 11
+  - debian11:
+      check_id: installed_OS_is_debian11
+      name: cpe:/o:debian:debian_linux:11
+      title: Debian Linux 11
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: gdm.d
 faillock_path: /var/run/faillock
 families:
-- debian
-- debian-like
+  - debian
+  - debian-like
 full_name: Debian 11
 gid_min: 1000
 groups: {}

diff --git a/tests/data/product_stability/eks.yml b/tests/data/product_stability/eks.yml
@@ -9,18 +9,18 @@ benchmark_id: EKS
 benchmark_root: ../../applications
 chrony_conf_path: /etc/chrony.conf
 cpes:
-- eks:
-    check_id: installed_app_is_eks
-    name: cpe:/a:amazon:elastic_kubernetes_service:1
-    title: Amazon Elastic Kubernetes Service
-- eks-node:
-    check_id: installed_app_is_eks_node
-    name: cpe:/o:amazon:elastic_kubernetes_service_node:1
-    title: Amazon Elastic Kubernetes Service Node
-- eks-1.21:
-    check_id: installed_app_is_eks_1_21
-    name: cpe:/a:amazon:elastic_kubernetes_service_node:1.21
-    title: Amazon Elastic Kubernetes Service 1.21
+  - eks:
+      check_id: installed_app_is_eks
+      name: cpe:/a:amazon:elastic_kubernetes_service:1
+      title: Amazon Elastic Kubernetes Service
+  - eks-node:
+      check_id: installed_app_is_eks_node
+      name: cpe:/o:amazon:elastic_kubernetes_service_node:1
+      title: Amazon Elastic Kubernetes Service Node
+  - eks-1.21:
+      check_id: installed_app_is_eks_1_21
+      name: cpe:/a:amazon:elastic_kubernetes_service_node:1.21
+      title: Amazon Elastic Kubernetes Service 1.21
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: gdm.d
 faillock_path: /var/run/faillock

diff --git a/tests/data/product_stability/example.yml b/tests/data/product_stability/example.yml
@@ -10,10 +10,10 @@ benchmark_root: ../../linux_os/guide
 chrony_conf_path: /etc/chrony.conf
 components_root: ../../components
 cpes:
-- example:
-    check_id: installed_OS_is_part_of_Unix_family
-    name: cpe:/o:example
-    title: Example
+  - example:
+      check_id: installed_OS_is_part_of_Unix_family
+      name: cpe:/o:example
+      title: Example
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: gdm.d
 faillock_path: /var/run/faillock

diff --git a/tests/data/product_stability/fedora.yml b/tests/data/product_stability/fedora.yml
@@ -10,26 +10,26 @@ benchmark_root: ../../linux_os/guide
 chrony_conf_path: /etc/chrony.conf
 components_root: ../../components
 cpes:
-- fedora_40:
-    check_id: installed_OS_is_fedora
-    name: cpe:/o:fedoraproject:fedora:40
-    title: Fedora 40
-- fedora_39:
-    check_id: installed_OS_is_fedora
-    name: cpe:/o:fedoraproject:fedora:39
-    title: Fedora 39
-- fedora_38:
-    check_id: installed_OS_is_fedora
-    name: cpe:/o:fedoraproject:fedora:38
-    title: Fedora 38
-- fedora_37:
-    check_id: installed_OS_is_fedora
-    name: cpe:/o:fedoraproject:fedora:37
-    title: Fedora 37
-- fedora_36:
-    check_id: installed_OS_is_fedora
-    name: cpe:/o:fedoraproject:fedora:36
-    title: Fedora 36
+  - fedora_40:
+      check_id: installed_OS_is_fedora
+      name: cpe:/o:fedoraproject:fedora:40
+      title: Fedora 40
+  - fedora_39:
+      check_id: installed_OS_is_fedora
+      name: cpe:/o:fedoraproject:fedora:39
+      title: Fedora 39
+  - fedora_38:
+      check_id: installed_OS_is_fedora
+      name: cpe:/o:fedoraproject:fedora:38
+      title: Fedora 38
+  - fedora_37:
+      check_id: installed_OS_is_fedora
+      name: cpe:/o:fedoraproject:fedora:37
+      title: Fedora 37
+  - fedora_36:
+      check_id: installed_OS_is_fedora
+      name: cpe:/o:fedoraproject:fedora:36
+      title: Fedora 36
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: distro.d
 faillock_path: /var/run/faillock

diff --git a/tests/data/product_stability/firefox.yml b/tests/data/product_stability/firefox.yml
@@ -9,10 +9,10 @@ benchmark_id: FIREFOX
 benchmark_root: ./guide
 chrony_conf_path: /etc/chrony.conf
 cpes:
-- firefox:
-    check_id: installed_app_is_firefox
-    name: cpe:/a:mozilla:firefox
-    title: Mozilla Firefox
+  - firefox:
+      check_id: installed_app_is_firefox
+      name: cpe:/a:mozilla:firefox
+      title: Mozilla Firefox
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: gdm.d
 faillock_path: /var/run/faillock

diff --git a/tests/data/product_stability/macos1015.yml b/tests/data/product_stability/macos1015.yml
@@ -9,10 +9,10 @@ benchmark_id: macOS-1015
 benchmark_root: ../../apple_os/
 chrony_conf_path: /etc/chrony.conf
 cpes:
-- macos15:
-    check_id: installed_OS_is_macos1015
-    name: cpe:/o:apple:macos:10.15
-    title: Apple macOS 10.15
+  - macos15:
+      check_id: installed_OS_is_macos1015
+      name: cpe:/o:apple:macos:10.15
+      title: Apple macOS 10.15
 cpes_root: ../../shared/applicability
 dconf_gdm_dir: gdm.d
 faillock_path: /var/run/faillock