Blame SOURCES/scap-security-guide-0.1.61-add_RHEL_08_040321-PR_8169.patch

12e95e
diff --git a/linux_os/guide/services/xwindows/disabling_xwindows/xwindows_runlevel_target/rule.yml b/linux_os/guide/services/xwindows/disabling_xwindows/xwindows_runlevel_target/rule.yml
12e95e
index de0e359a44e..df56a30be80 100644
12e95e
--- a/linux_os/guide/services/xwindows/disabling_xwindows/xwindows_runlevel_target/rule.yml
12e95e
+++ b/linux_os/guide/services/xwindows/disabling_xwindows/xwindows_runlevel_target/rule.yml
12e95e
@@ -39,6 +39,7 @@ references:
12e95e
     nist: CM-7(a),CM-7(b),CM-6(a)
12e95e
     nist-csf: PR.AC-3,PR.PT-4
12e95e
     srg: SRG-OS-000480-GPOS-00227
12e95e
+    stigid@rhel8: RHEL-08-040321
12e95e
 
12e95e
 ocil_clause: 'the X windows display server is running and/or has not been disabled'
12e95e
 
12e95e
diff --git a/products/rhel8/profiles/stig.profile b/products/rhel8/profiles/stig.profile
12e95e
index 09fa85df181..ffca983d0bd 100644
12e95e
--- a/products/rhel8/profiles/stig.profile
12e95e
+++ b/products/rhel8/profiles/stig.profile
12e95e
@@ -1169,6 +1169,9 @@ selections:
12e95e
     # RHEL-08-040320
12e95e
     - xwindows_remove_packages
12e95e
 
12e95e
+    # RHEL-08-040321
12e95e
+    - xwindows_runlevel_target
12e95e
+
12e95e
     # RHEL-08-040330
12e95e
     - network_sniffer_disabled
12e95e
 
12e95e
diff --git a/products/rhel8/profiles/stig_gui.profile b/products/rhel8/profiles/stig_gui.profile
12e95e
index d1577215b07..d29ceb9c54e 100644
12e95e
--- a/products/rhel8/profiles/stig_gui.profile
12e95e
+++ b/products/rhel8/profiles/stig_gui.profile
12e95e
@@ -35,3 +35,6 @@ extends: stig
12e95e
 selections:
12e95e
     # RHEL-08-040320
12e95e
     - '!xwindows_remove_packages'
12e95e
+
12e95e
+    # RHEL-08-040321
12e95e
+    - '!xwindows_runlevel_target'
12e95e
diff --git a/tests/data/profile_stability/rhel8/stig.profile b/tests/data/profile_stability/rhel8/stig.profile
12e95e
index 9c05c27117c..e4fee44f9f9 100644
12e95e
--- a/tests/data/profile_stability/rhel8/stig.profile
12e95e
+++ b/tests/data/profile_stability/rhel8/stig.profile
12e95e
@@ -398,6 +398,7 @@ selections:
12e95e
 - usbguard_generate_policy
12e95e
 - wireless_disable_interfaces
12e95e
 - xwindows_remove_packages
12e95e
+- xwindows_runlevel_target
12e95e
 - var_rekey_limit_size=1G
12e95e
 - var_rekey_limit_time=1hour
12e95e
 - var_accounts_user_umask=077