Merge pull request #12450 from Mab879/remove_ypbind_rhel10

Remove ypbind rules from RHEL10
ComplianceAsCode · Oct 8, 2024 · 35e9675 · 35e9675
2 parents 1a91080 + c516a1a
commit 35e9675
Show file tree

Hide file tree

Showing 6 changed files with 7 additions and 2 deletions.
diff --git a/controls/cis_rhel10.yml b/controls/cis_rhel10.yml
@@ -1048,8 +1048,7 @@ controls:
       - l1_server
       - l1_workstation
     status: automated
-    notes: Review the availability of this package when the product is out.
-    rules:
+    related_rules:
       - package_ypbind_removed
 
   - id: 2.2.4

diff --git a/products/rhel10/profiles/anssi_bp28_enhanced.profile b/products/rhel10/profiles/anssi_bp28_enhanced.profile
@@ -67,6 +67,7 @@ selections:
     - '!package_talk_removed'
     - '!package_talk-server_removed'
     - '!package_xinetd_removed'
+    - '!package_ypbind_removed'
     - '!package_ypserv_removed'
     # these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed
     - '!accounts_password_pam_retry'

diff --git a/products/rhel10/profiles/anssi_bp28_high.profile b/products/rhel10/profiles/anssi_bp28_high.profile
@@ -71,6 +71,7 @@ selections:
     - '!package_talk_removed'
     - '!package_talk-server_removed'
     - '!package_xinetd_removed'
+    - '!package_ypbind_removed'
     - '!package_ypserv_removed'
     # these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed
     - '!accounts_password_pam_retry'

diff --git a/products/rhel10/profiles/anssi_bp28_intermediary.profile b/products/rhel10/profiles/anssi_bp28_intermediary.profile
@@ -47,6 +47,7 @@ selections:
     - '!package_talk_removed'
     - '!package_talk-server_removed'
     - '!package_xinetd_removed'
+    - '!package_ypbind_removed'
     - '!package_ypserv_removed'
     # these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed
     - '!accounts_password_pam_retry'

diff --git a/products/rhel10/profiles/anssi_bp28_minimal.profile b/products/rhel10/profiles/anssi_bp28_minimal.profile
@@ -45,6 +45,7 @@ selections:
     - '!package_talk_removed'
     - '!package_talk-server_removed'
     - '!package_xinetd_removed'
+    - '!package_ypbind_removed'
     - '!package_ypserv_removed'
     # these rules are failing when they are remediated with Ansible, removing then temporarily until they are fixed
     - '!accounts_password_pam_retry'
diff --git a/products/rhel10/profiles/hipaa.profile b/products/rhel10/profiles/hipaa.profile
@@ -34,6 +34,7 @@ selections:
     - '!ensure_fedora_gpgkey_installed'
     - '!grub2_uefi_admin_username'
     - '!grub2_uefi_pass'
+    - '!service_ypbind_disabled'
     - '!service_zebra_disabled'
     - '!package_talk-server_removed'
     - '!package_talk_removed'
@@ -48,6 +49,7 @@ selections:
     - '!package_rsh_removed'
     - '!package_rsh-server_removed'
     - '!package_tcp_wrappers_removed'
+    - '!package_ypbind_removed'
     - '!package_xinetd_removed'
     - '!service_xinetd_disabled'
     - '!sshd_allow_only_protocol2'