Merge pull request #9932 from rumch-se/package_rsync_removed

Added a new SLE 12/15 rule package_rsync_removed
ComplianceAsCode · Dec 13, 2022 · bcf5237 · bcf5237
2 parents 76356e5 + df16405
commit bcf5237
Show file tree

Hide file tree

Showing 5 changed files with 36 additions and 8 deletions.
diff --git a/controls/cis_sle12.yml b/controls/cis_sle12.yml
@@ -732,11 +732,10 @@ controls:
     levels:
       - l1_server
       - l1_workstation
-    automated: partially
-    notes: >-
-      Package removal not covered by this rule
+    status: automated
     rules:
       - service_rsyncd_disabled
+      - package_rsync_removed
 
   - id: 2.2.18
     title: Ensure NIS server is not installed (Automated)

diff --git a/controls/cis_sle15.yml b/controls/cis_sle15.yml
@@ -713,11 +713,10 @@ controls:
     levels:
       - l1_server
       - l1_workstation
-    automated: partially
-    notes: >-
-      Package removal not covered by this rule
+    status: automated
     rules:
       - service_rsyncd_disabled
+      - package_rsync_removed
 
   - id: 2.2.18
     title: Ensure NIS server is not installed (Automated)

diff --git a/linux_os/guide/services/obsolete/package_rsync_removed/rule.yml b/linux_os/guide/services/obsolete/package_rsync_removed/rule.yml
@@ -0,0 +1,32 @@
+documentation_complete: true
+
+prodtype: sle12,sle15
+
+title: 'Uninstall rsync Package'
+
+description: |-
+    The rsyncd service can be used to synchronize files between systems over network links.
+    {{{ describe_package_remove(package="rsync") }}}
+
+rationale: |-
+    The rsyncd service presents a security risk as it uses unencrypted protocols for
+    communication.
+
+severity: medium
+
+identifiers:
+    cce@sle12: CCE-92313-6
+    cce@sle15: CCE-92468-8
+
+references:
+    cis@sle12: 2.2.17
+    cis@sle15: 2.2.17
+
+{{{ complete_ocil_entry_package(package="rsync") }}}
+
+fixtext: '{{{ fixtext_package_removed("rsync") }}}'
+
+template:
+    name: package_removed
+    vars:
+        pkgname: rsync
diff --git a/shared/references/cce-sle12-avail.txt b/shared/references/cce-sle12-avail.txt
@@ -13,7 +13,6 @@ CCE-92308-6
 CCE-92310-2
 CCE-92311-0
 CCE-92312-8
-CCE-92313-6
 CCE-92314-4
 CCE-92318-5
 CCE-92319-3

diff --git a/shared/references/cce-sle15-avail.txt b/shared/references/cce-sle15-avail.txt
@@ -14,7 +14,6 @@ CCE-92464-7
 CCE-92465-4
 CCE-92466-2
 CCE-92467-0
-CCE-92468-8
 CCE-92469-6
 CCE-92470-4
 CCE-92472-0