From 39b3893a5fd4217ed3c5b09bbd017ac3caa85485 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20=C4=8Cern=C3=BD?= Date: Wed, 24 Aug 2022 09:28:47 +0200 Subject: [PATCH 09/11] Merge pull request #9389 from yuumasato/pam_pkcs11_not_available_s390x Patch-name: scap-security-guide-0.1.64-pam_pkcs11_not_on_s390x-PR_9389.patch Patch-status: Put smartcard rules with pam_pkcs11 out of s390x --- .../smart_card_login/install_smartcard_packages/rule.yml | 2 ++ .../screen_locking/smart_card_login/smartcard_auth/rule.yml | 3 ++- .../smartcard_configure_cert_checking/rule.yml | 3 +++ 3 files changed, 7 insertions(+), 1 deletion(-) diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml index 9b33ac18a8..03fa6cccaa 100644 --- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml +++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml @@ -37,6 +37,8 @@ rationale: |- severity: medium +platform: not_s390x_arch + identifiers: cce@rhel7: CCE-80519-2 cce@rhel8: CCE-84029-8 diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml index 8153b31177..0f513b8972 100644 --- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml +++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml @@ -28,7 +28,8 @@ rationale: |- severity: medium -platform: machine # The check uses service_... extended definition, which doesnt support offline mode +platforms: + - not_s390x_arch identifiers: cce@rhel7: CCE-80207-4 diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml index 49bd5d1762..e416d99372 100644 --- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml +++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml @@ -24,6 +24,9 @@ rationale: |- severity: medium +platforms: + - not_s390x_arch + identifiers: cce@rhel7: CCE-80520-0 cce@rhel8: CCE-82475-5 -- 2.37.2