Merge pull request #11486 from rain-Qing/yuqing

Remove Alibaba Cloud Linux CIS-related profile and associated references
ComplianceAsCode · Jan 29, 2024 · 17413f3 · 17413f3
2 parents 2e5777a + 8f77cd3
commit 17413f3
Show file tree

Hide file tree

Showing 366 changed files with 44 additions and 4,684 deletions.
diff --git a/controls/cis_alinux2.yml b/controls/cis_alinux2.yml
diff --git a/controls/cis_alinux3.yml b/controls/cis_alinux3.yml
diff --git a/linux_os/guide/services/avahi/disable_avahi_group/service_avahi-daemon_disabled/rule.yml b/linux_os/guide/services/avahi/disable_avahi_group/service_avahi-daemon_disabled/rule.yml
@@ -23,8 +23,6 @@ identifiers:
 
 references:
     cis-csc: 11,14,3,9
-    cis@alinux2: 2.1.3
-    cis@alinux3: 2.2.4
     cis@rhel8: 2.2.2
     cis@sle12: 2.2.3
     cis@sle15: 2.2.3

diff --git a/linux_os/guide/services/cron_and_at/file_groupowner_cron_d/rule.yml b/linux_os/guide/services/cron_and_at/file_groupowner_cron_d/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.7
-    cis@alinux3: 5.1.7
     cis@rhel7: 4.1.1.7
     cis@rhel8: 4.1.1.7
     cis@rhel9: 5.1.7

diff --git a/linux_os/guide/services/cron_and_at/file_groupowner_cron_daily/rule.yml b/linux_os/guide/services/cron_and_at/file_groupowner_cron_daily/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.4
-    cis@alinux3: 5.1.4
     cis@rhel7: 4.1.1.4
     cis@rhel8: 4.1.1.4
     cis@rhel9: 5.1.4

diff --git a/linux_os/guide/services/cron_and_at/file_groupowner_cron_hourly/rule.yml b/linux_os/guide/services/cron_and_at/file_groupowner_cron_hourly/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.3
-    cis@alinux3: 5.1.3
     cis@rhel7: 4.1.1.3
     cis@rhel8: 4.1.1.3
     cis@rhel9: 5.1.3

diff --git a/linux_os/guide/services/cron_and_at/file_groupowner_cron_monthly/rule.yml b/linux_os/guide/services/cron_and_at/file_groupowner_cron_monthly/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.6
-    cis@alinux3: 5.1.6
     cis@rhel7: 4.1.1.6
     cis@rhel8: 4.1.1.6
     cis@rhel9: 5.1.6

diff --git a/linux_os/guide/services/cron_and_at/file_groupowner_cron_weekly/rule.yml b/linux_os/guide/services/cron_and_at/file_groupowner_cron_weekly/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.5
-    cis@alinux3: 5.1.5
     cis@rhel7: 4.1.1.5
     cis@rhel8: 4.1.1.5
     cis@rhel9: 5.1.5

diff --git a/linux_os/guide/services/cron_and_at/file_groupowner_crontab/rule.yml b/linux_os/guide/services/cron_and_at/file_groupowner_crontab/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.2
-    cis@alinux3: 5.1.2
     cis@rhel7: 4.1.1.2
     cis@rhel8: 4.1.1.2
     cis@rhel9: 5.1.2

diff --git a/linux_os/guide/services/cron_and_at/file_owner_cron_d/rule.yml b/linux_os/guide/services/cron_and_at/file_owner_cron_d/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.7
-    cis@alinux3: 5.1.7
     cis@rhel7: 4.1.1.7
     cis@rhel8: 4.1.1.7
     cis@rhel9: 5.1.7

diff --git a/linux_os/guide/services/cron_and_at/file_owner_cron_daily/rule.yml b/linux_os/guide/services/cron_and_at/file_owner_cron_daily/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.4
-    cis@alinux3: 5.1.4
     cis@rhel7: 4.1.1.4
     cis@rhel8: 4.1.1.4
     cis@rhel9: 5.1.4

diff --git a/linux_os/guide/services/cron_and_at/file_owner_cron_hourly/rule.yml b/linux_os/guide/services/cron_and_at/file_owner_cron_hourly/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.3
-    cis@alinux3: 5.1.3
     cis@rhel7: 4.1.1.3
     cis@rhel8: 4.1.1.3
     cis@rhel9: 5.1.3

diff --git a/linux_os/guide/services/cron_and_at/file_owner_cron_monthly/rule.yml b/linux_os/guide/services/cron_and_at/file_owner_cron_monthly/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.6
-    cis@alinux3: 5.1.6
     cis@rhel7: 4.1.1.6
     cis@rhel8: 4.1.1.6
     cis@rhel9: 5.1.6

diff --git a/linux_os/guide/services/cron_and_at/file_owner_cron_weekly/rule.yml b/linux_os/guide/services/cron_and_at/file_owner_cron_weekly/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.5
-    cis@alinux3: 5.1.5
     cis@rhel7: 4.1.1.5
     cis@rhel8: 4.1.1.5
     cis@rhel9: 5.1.5

diff --git a/linux_os/guide/services/cron_and_at/file_owner_crontab/rule.yml b/linux_os/guide/services/cron_and_at/file_owner_crontab/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.2
-    cis@alinux3: 5.1.2
     cis@rhel7: 4.1.1.2
     cis@rhel8: 4.1.1.2
     cis@rhel9: 5.1.2

diff --git a/linux_os/guide/services/cron_and_at/file_permissions_cron_d/rule.yml b/linux_os/guide/services/cron_and_at/file_permissions_cron_d/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.7
-    cis@alinux3: 5.1.7
     cis@rhel7: 4.1.1.7
     cis@rhel8: 4.1.1.7
     cis@rhel9: 5.1.7

diff --git a/linux_os/guide/services/cron_and_at/file_permissions_cron_daily/rule.yml b/linux_os/guide/services/cron_and_at/file_permissions_cron_daily/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.4
-    cis@alinux3: 5.1.4
     cis@rhel7: 4.1.1.4
     cis@rhel8: 4.1.1.4
     cis@rhel9: 5.1.4

diff --git a/linux_os/guide/services/cron_and_at/file_permissions_cron_hourly/rule.yml b/linux_os/guide/services/cron_and_at/file_permissions_cron_hourly/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.3
-    cis@alinux3: 5.1.3
     cis@rhel7: 4.1.1.3
     cis@rhel8: 4.1.1.3
     cis@rhel9: 5.1.3

diff --git a/linux_os/guide/services/cron_and_at/file_permissions_cron_monthly/rule.yml b/linux_os/guide/services/cron_and_at/file_permissions_cron_monthly/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.6
-    cis@alinux3: 5.1.6
     cis@rhel7: 4.1.1.6
     cis@rhel8: 4.1.1.6
     cis@rhel9: 5.1.6

diff --git a/linux_os/guide/services/cron_and_at/file_permissions_cron_weekly/rule.yml b/linux_os/guide/services/cron_and_at/file_permissions_cron_weekly/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.5
-    cis@alinux3: 5.1.5
     cis@rhel7: 4.1.1.5
     cis@rhel8: 4.1.1.5
     cis@rhel9: 5.1.5

diff --git a/linux_os/guide/services/cron_and_at/file_permissions_crontab/rule.yml b/linux_os/guide/services/cron_and_at/file_permissions_crontab/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.2
-    cis@alinux3: 5.1.2
     cis@rhel7: 4.1.1.2
     cis@rhel8: 4.1.1.2
     cis@rhel9: 5.1.2

diff --git a/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_at_deny_not_exist/rule.yml b/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_at_deny_not_exist/rule.yml
@@ -21,8 +21,6 @@ identifiers:
     cce@sle15: CCE-91313-7
 
 references:
-    cis@alinux2: 5.1.8
-    cis@alinux3: 5.1.8
     cis@rhel7: 4.1.2.1
     cis@rhel8: 4.1.2.1
     cis@rhel9: 5.1.9

diff --git a/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_cron_deny_not_exist/rule.yml b/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_cron_deny_not_exist/rule.yml
@@ -22,8 +22,6 @@ identifiers:
     cce@sle15: CCE-91314-5
 
 references:
-    cis@alinux2: 5.1.8
-    cis@alinux3: 5.1.8
     cis@rhel7: 4.1.1.8
     cis@rhel8: 4.1.1.8
     cis@rhel9: 5.1.8

diff --git a/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_groupowner_at_allow/rule.yml b/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_groupowner_at_allow/rule.yml
@@ -20,8 +20,6 @@ identifiers:
     cce@sle15: CCE-91315-2
 
 references:
-    cis@alinux2: 5.1.8
-    cis@alinux3: 5.1.8
     cis@rhel7: 4.1.2.1
     cis@rhel8: 4.1.2.1
     cis@rhel9: 5.1.9

diff --git a/..._os/guide/services/cron_and_at/restrict_at_cron_users/file_groupowner_cron_allow/rule.yml b/..._os/guide/services/cron_and_at/restrict_at_cron_users/file_groupowner_cron_allow/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.8
-    cis@alinux3: 5.1.8
     cis@rhel7: 4.1.1.8
     cis@rhel8: 4.1.1.8
     cis@rhel9: 5.1.8

diff --git a/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_owner_at_allow/rule.yml b/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_owner_at_allow/rule.yml
@@ -21,8 +21,6 @@ identifiers:
     cce@sle15: CCE-91317-8
 
 references:
-    cis@alinux2: 5.1.8
-    cis@alinux3: 5.1.8
     cis@rhel7: 4.1.2.1
     cis@rhel8: 4.1.2.1
     cis@rhel9: 5.1.9

diff --git a/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_owner_cron_allow/rule.yml b/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_owner_cron_allow/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
-    cis@alinux2: 5.1.8
-    cis@alinux3: 5.1.8
     cis@rhel7: 4.1.1.8
     cis@rhel8: 4.1.1.8
     cis@rhel9: 5.1.8

diff --git a/...x_os/guide/services/cron_and_at/restrict_at_cron_users/file_permissions_at_allow/rule.yml b/...x_os/guide/services/cron_and_at/restrict_at_cron_users/file_permissions_at_allow/rule.yml
@@ -30,8 +30,6 @@ identifiers:
     cce@sle15: CCE-91319-4
 
 references:
-    cis@alinux2: 5.1.8
-    cis@alinux3: 5.1.8
     cis@rhel7: 4.1.2.1
     cis@rhel8: 4.1.2.1
     cis@rhel9: 5.1.9

diff --git a/...os/guide/services/cron_and_at/restrict_at_cron_users/file_permissions_cron_allow/rule.yml b/...os/guide/services/cron_and_at/restrict_at_cron_users/file_permissions_cron_allow/rule.yml
@@ -31,8 +31,6 @@ identifiers:
     cce@sle15: CCE-91320-2
 
 references:
-    cis@alinux2: 5.1.8
-    cis@alinux3: 5.1.8
     cis@rhel7: 4.1.1.8
     cis@rhel8: 4.1.1.8
     cis@rhel9: 5.1.8

diff --git a/linux_os/guide/services/cron_and_at/service_crond_enabled/rule.yml b/linux_os/guide/services/cron_and_at/service_crond_enabled/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 11,14,3,9
-    cis@alinux2: 5.1.2
-    cis@alinux3: 5.1.1
     cis@rhel7: 4.1.1.1
     cis@rhel8: 4.1.1.1
     cis@rhel9: 5.1.1

diff --git a/linux_os/guide/services/dhcp/disabling_dhcp_server/service_dhcpd_disabled/rule.yml b/linux_os/guide/services/dhcp/disabling_dhcp_server/service_dhcpd_disabled/rule.yml
@@ -24,8 +24,6 @@ identifiers:
 
 references:
     cis-csc: 11,14,3,9
-    cis@alinux2: 2.1.5
-    cis@alinux3: 2.2.15
     cis@rhel7: 2.2.5
     cis@rhel8: 2.2.3
     cis@sle12: 2.2.5

diff --git a/linux_os/guide/services/dns/disabling_dns_server/service_named_disabled/rule.yml b/linux_os/guide/services/dns/disabling_dns_server/service_named_disabled/rule.yml
@@ -21,8 +21,6 @@ identifiers:
 
 references:
     cis-csc: 11,14,3,9
-    cis@alinux2: 2.1.8
-    cis@alinux3: 2.2.11
     cis@rhel7: 2.2.4
     cis@rhel8: 2.2.4
     cis@sle12: 2.2.9

diff --git a/linux_os/guide/services/ftp/disabling_vsftpd/service_vsftpd_disabled/rule.yml b/linux_os/guide/services/ftp/disabling_vsftpd/service_vsftpd_disabled/rule.yml
@@ -23,8 +23,6 @@ identifiers:
 
 references:
     cis-csc: 11,14,3,9
-    cis@alinux2: 2.1.9
-    cis@alinux3: 2.2.10
     cis@rhel7: 2.2.7
     cis@rhel8: 2.2.7
     cis@sle12: 2.2.10

diff --git a/linux_os/guide/services/http/disabling_httpd/service_httpd_disabled/rule.yml b/linux_os/guide/services/http/disabling_httpd/service_httpd_disabled/rule.yml
@@ -21,8 +21,6 @@ identifiers:
 
 references:
     cis-csc: 11,14,3,9
-    cis@alinux2: 2.1.10
-    cis@alinux3: 2.2.9
     cis@rhel7: 2.2.18
     cis@rhel8: 2.2.18
     cis@sle12: 2.2.11

diff --git a/linux_os/guide/services/imap/disabling_dovecot/package_dovecot_removed/rule.yml b/linux_os/guide/services/imap/disabling_dovecot/package_dovecot_removed/rule.yml
@@ -25,7 +25,6 @@ identifiers:
 
 references:
     ccn@rhel9: A.8.SEC-RHEL4
-    cis@alinux2: 2.1.11
     cis@rhel7: 2.2.8
     cis@rhel8: 2.2.8
     cis@rhel9: 2.2.9

diff --git a/linux_os/guide/services/imap/disabling_dovecot/service_dovecot_disabled/rule.yml b/linux_os/guide/services/imap/disabling_dovecot/service_dovecot_disabled/rule.yml
@@ -20,7 +20,6 @@ identifiers:
     cce@sle15: CCE-91368-1
 
 references:
-    cis@alinux3: 2.2.8
     cis@rhel7: 2.2.8
     cis@rhel8: 2.2.8
     cis@sle12: 2.2.12

diff --git a/linux_os/guide/services/ldap/openldap_client/package_openldap-clients_removed/rule.yml b/linux_os/guide/services/ldap/openldap_client/package_openldap-clients_removed/rule.yml
@@ -31,8 +31,6 @@ identifiers:
     cce@sle15: CCE-91310-3
 
 references:
-    cis@alinux2: 2.2.5
-    cis@alinux3: 2.3.3
     cis@rhel7: 2.3.2
     cis@rhel8: 2.3.2
     cis@rhel9: 2.3.2

diff --git a/linux_os/guide/services/ldap/openldap_server/service_slapd_disabled/rule.yml b/linux_os/guide/services/ldap/openldap_server/service_slapd_disabled/rule.yml
@@ -16,10 +16,6 @@ identifiers:
     cce@rhel8: CCE-87262-2
     cce@rhel9: CCE-87263-0
 
-references:
-    cis@alinux2: 2.1.6
-    cis@alinux3: 2.2.14
-
 ocil_clause: |-
     {{{ ocil_clause_service_disabled(service="slapd") }}}
 

diff --git a/linux_os/guide/services/mail/postfix_client/postfix_network_listening_disabled/rule.yml b/linux_os/guide/services/mail/postfix_client/postfix_network_listening_disabled/rule.yml
@@ -25,8 +25,6 @@ identifiers:
 references:
     anssi: BP28(R48)
     cis-csc: 11,14,3,9
-    cis@alinux2: 2.1.15
-    cis@alinux3: 2.2.18
     cis@rhel7: 2.2.21
     cis@rhel8: 2.2.21
     cis@rhel9: 2.2.15

diff --git a/...rvices/nfs_and_rpc/disabling_nfs/disabling_nfs_services/service_rpcbind_disabled/rule.yml b/...rvices/nfs_and_rpc/disabling_nfs/disabling_nfs_services/service_rpcbind_disabled/rule.yml
@@ -26,8 +26,6 @@ identifiers:
     cce@sle15: CCE-91312-9
 
 references:
-    cis@alinux2: 2.1.7
-    cis@alinux3: 2.2.13
     cis@rhel7: 2.2.12
     cis@rhel8: 2.2.12
     cis@rhel9: 2.2.17

diff --git a/...services/nfs_and_rpc/nfs_configuring_clients/disabling_nfsd/service_nfs_disabled/rule.yml b/...services/nfs_and_rpc/nfs_configuring_clients/disabling_nfsd/service_nfs_disabled/rule.yml
@@ -22,8 +22,6 @@ identifiers:
 
 references:
     cis-csc: 11,12,14,15,16,18,3,5
-    cis@alinux2: 2.1.7
-    cis@alinux3: 2.2.12
     cis@rhel7: 2.2.9
     cis@rhel8: 2.2.9
     cis@rhel9: 2.2.16

diff --git a/linux_os/guide/services/ntp/chronyd_run_as_chrony_user/rule.yml b/linux_os/guide/services/ntp/chronyd_run_as_chrony_user/rule.yml
@@ -46,8 +46,6 @@ identifiers:
 
 references:
     ccn@rhel9: A.3.SEC-RHEL3
-    cis@alinux2: 2.1.1.3
-    cis@alinux3: 2.2.1.2
     cis@rhel7: 2.1.3
     cis@rhel8: 2.1.3
     cis@rhel9: 2.1.2

diff --git a/linux_os/guide/services/ntp/chronyd_specify_remote_server/rule.yml b/linux_os/guide/services/ntp/chronyd_specify_remote_server/rule.yml
@@ -31,8 +31,6 @@ identifiers:
 references:
     anssi: BP28(R71)
     ccn@rhel9: A.3.SEC-RHEL3
-    cis@alinux2: 2.1.1.3
-    cis@alinux3: 2.2.1.2
     cis@rhel7: 2.1.2
     cis@rhel8: 2.1.2
     cis@rhel9: 2.1.2

diff --git a/linux_os/guide/services/ntp/ntpd_configure_restrictions/rule.yml b/linux_os/guide/services/ntp/ntpd_configure_restrictions/rule.yml
@@ -23,7 +23,6 @@ severity: medium
 platform: package[ntp]
 
 references:
-    cis@alinux2: 2.1.1.2
     cis@sle12: 2.2.1.4
     cis@ubuntu2004: 2.2.1.4
     cis@ubuntu2204: 2.1.4.1

diff --git a/linux_os/guide/services/ntp/ntpd_run_as_ntp_user/rule.yml b/linux_os/guide/services/ntp/ntpd_run_as_ntp_user/rule.yml
@@ -24,7 +24,6 @@ severity: medium
 platform: package[ntp]
 
 references:
-    cis@alinux2: 2.1.1.2
     cis@sle12: 2.2.1.4
     cis@ubuntu2004: 2.2.1.4
     cis@ubuntu2204: 2.1.4.3

diff --git a/linux_os/guide/services/ntp/ntpd_specify_remote_server/rule.yml b/linux_os/guide/services/ntp/ntpd_specify_remote_server/rule.yml
@@ -26,7 +26,6 @@ identifiers:
 
 references:
     cis-csc: 1,14,15,16,3,5,6
-    cis@alinux2: 2.1.1.2
     cis@sle12: 2.2.1.4
     cobit5: APO11.04,BAI03.05,DSS05.04,DSS05.07,MEA02.01
     isa-62443-2009: 4.3.3.3.9,4.3.3.5.8,4.3.4.4.7,4.4.2.1,4.4.2.2,4.4.2.4