Blob Blame History Raw
From 39b3893a5fd4217ed3c5b09bbd017ac3caa85485 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20=C4=8Cern=C3=BD?= <jcerny@redhat.com>
Date: Wed, 24 Aug 2022 09:28:47 +0200
Subject: [PATCH 09/11] Merge pull request #9389 from
 yuumasato/pam_pkcs11_not_available_s390x

Patch-name: scap-security-guide-0.1.64-pam_pkcs11_not_on_s390x-PR_9389.patch
Patch-status: Put smartcard rules with pam_pkcs11 out of s390x
---
 .../smart_card_login/install_smartcard_packages/rule.yml       | 2 ++
 .../screen_locking/smart_card_login/smartcard_auth/rule.yml    | 3 ++-
 .../smartcard_configure_cert_checking/rule.yml                 | 3 +++
 3 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml
index 9b33ac18a8..03fa6cccaa 100644
--- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml
@@ -37,6 +37,8 @@ rationale: |-
 
 severity: medium
 
+platform: not_s390x_arch
+
 identifiers:
     cce@rhel7: CCE-80519-2
     cce@rhel8: CCE-84029-8
diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml
index 8153b31177..0f513b8972 100644
--- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml
@@ -28,7 +28,8 @@ rationale: |-
 
 severity: medium
 
-platform: machine  # The check uses service_... extended definition, which doesnt support offline mode
+platforms:
+    - not_s390x_arch
 
 identifiers:
     cce@rhel7: CCE-80207-4
diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml
index 49bd5d1762..e416d99372 100644
--- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml
@@ -24,6 +24,9 @@ rationale: |-
 
 severity: medium
 
+platforms:
+    - not_s390x_arch
+
 identifiers:
     cce@rhel7: CCE-80520-0
     cce@rhel8: CCE-82475-5
-- 
2.37.2