diff --git a/controls/pcidss_4.yml b/controls/pcidss_4.yml index 17b688dfab6..267ee78d418 100644 --- a/controls/pcidss_4.yml +++ b/controls/pcidss_4.yml @@ -500,6 +500,7 @@ controls: - file_permissions_cron_allow - file_groupowner_crontab - file_owner_crontab + - package_cron_installed - file_permissions_crontab - file_groupowner_cron_d - file_owner_cron_d diff --git a/linux_os/guide/services/cron_and_at/package_cron_installed/rule.yml b/linux_os/guide/services/cron_and_at/package_cron_installed/rule.yml index 9aa317b1239..ad87c581572 100644 --- a/linux_os/guide/services/cron_and_at/package_cron_installed/rule.yml +++ b/linux_os/guide/services/cron_and_at/package_cron_installed/rule.yml @@ -1,4 +1,4 @@ -{{% if product in ["rhel9", "rhel10", "sle12", "sle15"] %}} +{{% if product in ["rhel8", "rhel9", "rhel10", "sle12", "sle15"] %}} {{% set package_name = "cronie" %}} {{% else %}} {{% set package_name = "cron" %}} @@ -15,6 +15,7 @@ rationale: 'The cron service allow periodic job execution, needed for almost all severity: medium identifiers: + cce@rhel8: CCE-86178-1 cce@rhel9: CCE-86170-8 cce@rhel10: CCE-86619-4 cce@sle12: CCE-92263-3 @@ -44,8 +45,4 @@ ocil: |- template: name: package_installed vars: - pkgname: cron - pkgname@rhel9: cronie - pkgname@rhel10: cronie - pkgname@sle12: cronie - pkgname@sle15: cronie + pkgname: {{{ package_name }}} diff --git a/shared/references/cce-redhat-avail.txt b/shared/references/cce-redhat-avail.txt index 71dddd11669..b8b7b33a209 100644 --- a/shared/references/cce-redhat-avail.txt +++ b/shared/references/cce-redhat-avail.txt @@ -1,4 +1,3 @@ -CCE-86178-1 CCE-86179-9 CCE-86180-7 CCE-86186-4 diff --git a/tests/data/profile_stability/rhel8/pci-dss.profile b/tests/data/profile_stability/rhel8/pci-dss.profile index e8e1992dc5a..f8fb7037443 100644 --- a/tests/data/profile_stability/rhel8/pci-dss.profile +++ b/tests/data/profile_stability/rhel8/pci-dss.profile @@ -201,6 +201,7 @@ selections: - package_audispd-plugins_installed - package_audit_installed - package_chrony_installed +- package_cron_installed - package_dhcp_removed - package_firewalld_installed - package_ftp_removed diff --git a/tests/data/profile_stability/rhel9/pci-dss.profile b/tests/data/profile_stability/rhel9/pci-dss.profile index aae368bafba..861bbae835e 100644 --- a/tests/data/profile_stability/rhel9/pci-dss.profile +++ b/tests/data/profile_stability/rhel9/pci-dss.profile @@ -198,6 +198,7 @@ selections: - package_audispd-plugins_installed - package_audit_installed - package_chrony_installed +- package_cron_installed - package_cryptsetup-luks_installed - package_dhcp_removed - package_firewalld_installed