Revert "remove not needed controls from cis profiles - fix chronyd conf by pointing to aws servers"

Mirco Santori · Mirco Santori · commit 4d9849743f86 · 2024-06-03T14:24:26.000+02:00
This reverts commit e745325.
diff --git a/build/.gitkeep b/build/.gitkeep
diff --git a/controls/cis_al2023.yml b/controls/cis_al2023.yml
@@ -550,7 +550,7 @@ controls:
     rules:
       - chronyd_specify_remote_server
       - chronyd_run_as_chrony_user
-      - var_multiple_time_servers=amazon
+      - var_multiple_time_servers=rhel
 
   - id: 2.2.1
     title: Ensure xorg-x11-server-common is not installed (Automated)
diff --git a/products/al2023/profiles/cis.profile b/products/al2023/profiles/cis.profile
@@ -19,3 +19,6 @@ description: |-
 
 selections:
     - cis_al2023:all:l2_server
+    - '!file_ownership_home_directories'
+    - '!group_unique_name'
+    - '!file_owner_at_allow'
diff --git a/products/al2023/profiles/cis_server_l1.profile b/products/al2023/profiles/cis_server_l1.profile
@@ -19,3 +19,6 @@ description: |-
 
 selections:
     - cis_al2023:all:l1_server
+    - '!file_ownership_home_directories'
+    - '!group_unique_name'
+    - '!file_owner_at_allow'
