Merge pull request #12255 from teacup-on-rockingchair/stig_slmicro5_p…

…am_pwhistory_remember Add to slmicro5 STIG pam pwhistory remember rule
ComplianceAsCode · Aug 2, 2024 · fb26b1e · fb26b1e
2 parents 9806f9e + db5a548
commit fb26b1e
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/controls/stig_slmicro5.yml b/controls/stig_slmicro5.yml
@@ -1021,9 +1021,12 @@ controls:
       levels:
           - medium
       title: SLEM 5 must not allow passwords to be reused for a minimum of five generations.
-      rules: []
-      status: pending
-
+      rules:
+        - accounts_password_pam_pwhistory_remember
+        - var_password_pam_remember_control_flag=requisite
+        - var_password_pam_remember=5
+      status: automated
+
     - id: SLEM-05-611050
       levels:
           - medium

diff --git a/...ounts-pam/locking_out_password_attempts/accounts_password_pam_pwhistory_remember/rule.yml b/...ounts-pam/locking_out_password_attempts/accounts_password_pam_pwhistory_remember/rule.yml
@@ -21,6 +21,7 @@ severity: medium
 identifiers:
     cce@sle12: CCE-83173-5
     cce@sle15: CCE-91398-8
+    cce@slmicro5: CCE-94082-5
 
 references:
     cis@sle12: 5.3.3

diff --git a/shared/references/cce-slmicro5-avail.txt b/shared/references/cce-slmicro5-avail.txt
@@ -444,7 +444,6 @@ CCE-94078-3
 CCE-94079-1
 CCE-94080-9
 CCE-94081-7
-CCE-94082-5
 CCE-94083-3
 CCE-94084-1
 CCE-94085-8