Merge pull request ComplianceAsCode#35 from SUSE/SLES-12-030191_works

brett060102 · web-flow · commit 0cb378ede0be · 2020-12-15T08:08:22.000-06:00
Add rules and remediation for SLES-12-030191 STIG
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/ansible/shared.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/ansible/shared.yml
@@ -0,0 +1,7 @@
+# platform = multi_platform_sle
+# reboot = false
+# strategy = restrict
+# complexity = low
+# disruption = low
+
+{{{ ansible_sshd_set(parameter="ClientAliveCountMax", value="0") }}}
diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel7: CCE-27082-7
     cce@rhel8: CCE-80907-9
     cce@rhcos4: CCE-82464-9
+    cce@sle12: CCE-83034-9
 
 references:
     stigid@ol7: OL07-00-040340
diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile
@@ -17,6 +17,7 @@ selections:
     - sshd_set_idle_timeout
     - disable_ctrlaltdel_reboot
     - sshd_enable_x11_forwarding
+    - sshd_set_keepalive
     - gnome_gdm_disable_automatic_login
     - no_user_host_based_files
     - auditd_data_disk_full_action
