Add rules to SRG-OS-000730-GPOS-00190

ComplianceAsCode · Aug 28, 2024 · a566b8c · a566b8c
1 parent a29c810
commit a566b8c
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 4 deletions.
diff --git a/controls/srg_gpos/SRG-OS-000730-GPOS-00190.yml b/controls/srg_gpos/SRG-OS-000730-GPOS-00190.yml
@@ -1,8 +1,13 @@
 controls:
     -   id: SRG-OS-000730-GPOS-00190
         title: '{{{ full_name }}} must, for password-based authentication, employ automated
-        tools to assist the user in selecting strong password authenticators.'
+                tools to assist the user in selecting strong password authenticators.'
         levels:
             - medium
-        status: pending
+        status: automated
+        rules:
+            - accounts_password_pam_maxclassrepeat
+            - var_password_pam_maxclassrepeat=3
+            - var_password_pam_dictcheck=1
+            - accounts_password_pam_dictcheck
 
diff --git a/...-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml b/...-pam/password_quality/password_quality_pwquality/accounts_password_pam_dictcheck/rule.yml
@@ -28,7 +28,7 @@ identifiers:
 references:
     disa: CCI-000366
     nist: IA-5(c),IA-5(1)(a),CM-6(a),IA-5(4)
-    srg: SRG-OS-000480-GPOS-00225
+    srg: SRG-OS-000480-GPOS-00225,SRG-OS-000072-GPOS-00040
     stigid@ol8: OL08-00-020300
     stigid@rhel8: RHEL-08-020300
     stigid@ubuntu2004: UBTU-20-010056

diff --git a/...password_quality/password_quality_pwquality/accounts_password_pam_maxclassrepeat/rule.yml b/...password_quality/password_quality_pwquality/accounts_password_pam_maxclassrepeat/rule.yml
@@ -35,7 +35,7 @@ references:
     iso27001-2013: A.18.1.4,A.7.1.1,A.9.2.1,A.9.2.2,A.9.2.3,A.9.2.4,A.9.2.6,A.9.3.1,A.9.4.2,A.9.4.3
     nist: IA-5(c),IA-5(1)(a),CM-6(a),IA-5(4)
     nist-csf: PR.AC-1,PR.AC-6,PR.AC-7
-    srg: SRG-OS-000072-GPOS-00040
+    srg: SRG-OS-000072-GPOS-00040,SRG-OS-000730-GPOS-00190
     stigid@ol7: OL07-00-010190
     stigid@ol8: OL08-00-020140
     stigid@rhel8: RHEL-08-020140