|
 |
bd46b7 |
From 39b3893a5fd4217ed3c5b09bbd017ac3caa85485 Mon Sep 17 00:00:00 2001
|
|
|
bd46b7 |
From: =?UTF-8?q?Jan=20=C4=8Cern=C3=BD?= <jcerny@redhat.com>
|
|
|
bd46b7 |
Date: Wed, 24 Aug 2022 09:28:47 +0200
|
|
|
bd46b7 |
Subject: [PATCH 09/11] Merge pull request #9389 from
|
|
|
bd46b7 |
yuumasato/pam_pkcs11_not_available_s390x
|
|
|
bd46b7 |
|
|
|
bd46b7 |
Patch-name: scap-security-guide-0.1.64-pam_pkcs11_not_on_s390x-PR_9389.patch
|
|
|
bd46b7 |
Patch-status: Put smartcard rules with pam_pkcs11 out of s390x
|
|
|
bd46b7 |
---
|
|
|
bd46b7 |
.../smart_card_login/install_smartcard_packages/rule.yml | 2 ++
|
|
|
bd46b7 |
.../screen_locking/smart_card_login/smartcard_auth/rule.yml | 3 ++-
|
|
|
bd46b7 |
.../smartcard_configure_cert_checking/rule.yml | 3 +++
|
|
|
bd46b7 |
3 files changed, 7 insertions(+), 1 deletion(-)
|
|
|
bd46b7 |
|
|
|
bd46b7 |
diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml
|
|
|
bd46b7 |
index 9b33ac18a8..03fa6cccaa 100644
|
|
|
bd46b7 |
--- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml
|
|
|
bd46b7 |
+++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml
|
|
|
bd46b7 |
@@ -37,6 +37,8 @@ rationale: |-
|
|
|
bd46b7 |
|
|
|
bd46b7 |
severity: medium
|
|
|
bd46b7 |
|
|
|
bd46b7 |
+platform: not_s390x_arch
|
|
|
bd46b7 |
+
|
|
|
bd46b7 |
identifiers:
|
|
|
bd46b7 |
cce@rhel7: CCE-80519-2
|
|
|
bd46b7 |
cce@rhel8: CCE-84029-8
|
|
|
bd46b7 |
diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml
|
|
|
bd46b7 |
index 8153b31177..0f513b8972 100644
|
|
|
bd46b7 |
--- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml
|
|
|
bd46b7 |
+++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml
|
|
|
bd46b7 |
@@ -28,7 +28,8 @@ rationale: |-
|
|
|
bd46b7 |
|
|
|
bd46b7 |
severity: medium
|
|
|
bd46b7 |
|
|
|
bd46b7 |
-platform: machine # The check uses service_... extended definition, which doesnt support offline mode
|
|
|
bd46b7 |
+platforms:
|
|
|
bd46b7 |
+ - not_s390x_arch
|
|
|
bd46b7 |
|
|
|
bd46b7 |
identifiers:
|
|
|
bd46b7 |
cce@rhel7: CCE-80207-4
|
|
|
bd46b7 |
diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml
|
|
|
bd46b7 |
index 49bd5d1762..e416d99372 100644
|
|
|
bd46b7 |
--- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml
|
|
|
bd46b7 |
+++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml
|
|
|
bd46b7 |
@@ -24,6 +24,9 @@ rationale: |-
|
|
|
bd46b7 |
|
|
|
bd46b7 |
severity: medium
|
|
|
bd46b7 |
|
|
|
bd46b7 |
+platforms:
|
|
|
bd46b7 |
+ - not_s390x_arch
|
|
|
bd46b7 |
+
|
|
|
bd46b7 |
identifiers:
|
|
|
bd46b7 |
cce@rhel7: CCE-80520-0
|
|
|
bd46b7 |
cce@rhel8: CCE-82475-5
|
|
|
bd46b7 |
--
|
|
|
bd46b7 |
2.37.2
|
|
|
bd46b7 |
|