Remove not applicable rules for OL9

Signed-off-by: Edgar Aguilar <[email protected]>
ComplianceAsCode · Oct 31, 2024 · 98204a5 · 98204a5
1 parent 2f3aa3c
commit 98204a5
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 133 deletions.
diff --git a/products/ol9/profiles/anssi_bp28_enhanced.profile b/products/ol9/profiles/anssi_bp28_enhanced.profile
@@ -42,3 +42,9 @@ selections:
     - '!cracklib_accounts_password_pam_dcredit'
     - '!package_xinetd_removed'
     - '!package_kea_removed'
+    # disable R45: Enable AppArmor security profiles
+    - '!apparmor_configured'
+    - '!all_apparmor_profiles_enforced'
+    - '!grub2_enable_apparmor'
+    - '!package_apparmor_installed'
+    - '!package_pam_apparmor_installed'
diff --git a/products/ol9/profiles/anssi_bp28_high.profile b/products/ol9/profiles/anssi_bp28_high.profile
@@ -43,3 +43,9 @@ selections:
     - '!cracklib_accounts_password_pam_dcredit'
     - '!package_xinetd_removed'
     - '!package_kea_removed'
+    # disable R45: Enable AppArmor security profiles
+    - '!apparmor_configured'
+    - '!all_apparmor_profiles_enforced'
+    - '!grub2_enable_apparmor'
+    - '!package_apparmor_installed'
+    - '!package_pam_apparmor_installed'
diff --git a/products/ol9/profiles/default.profile b/products/ol9/profiles/default.profile
diff --git a/products/ol9/profiles/standard.profile b/products/ol9/profiles/standard.profile
@@ -70,14 +70,11 @@ selections:
     - audit_rules_unsuccessful_file_modification
     - audit_rules_usergroup_modification
     - package_rsyslog_installed
-    - service_abrtd_disabled
     - service_atd_disabled
     - service_autofs_disabled
-    - service_ntpdate_disabled
     - service_oddjobd_disabled
     - service_rdisc_disabled
     - service_rsyslog_enabled
-    - service_qpidd_disabled
     - partition_for_var_log
     - partition_for_var_log_audit
     - configure_crypto_policy