Change RHEL 7 CIS 6.2.11

Use accounts_users_netrc_file_permissions instead of no_netrc_files to better align with the CIS Benchmark.
ComplianceAsCode · Jan 18, 2024 · 591d05d · 591d05d
1 parent d7b3809
commit 591d05d
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/controls/cis_rhel7.yml b/controls/cis_rhel7.yml
@@ -2453,4 +2453,4 @@ controls:
     - accounts_user_dot_no_world_writable_programs
     - no_forward_files
     - no_rsh_trust_files
-    - no_netrc_files
+    - accounts_users_netrc_file_permissions
diff --git a/...x_os/guide/system/accounts/accounts-restrictions/password_storage/no_netrc_files/rule.yml b/...x_os/guide/system/accounts/accounts-restrictions/password_storage/no_netrc_files/rule.yml
@@ -27,7 +27,6 @@ references:
     cis-csc: 1,11,12,14,15,16,18,3,5
     cis@alinux2: 6.2.12
     cis@alinux3: 6.2.8
-    cis@rhel7: 6.2.11
     cis@rhel8: 6.2.13,6.2.15
     cis@rhel9: 6.2.13
     cis@sle12: 6.2.10

diff --git a/..._os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/rule.yml b/..._os/guide/system/accounts/accounts-session/accounts_users_netrc_file_permissions/rule.yml
@@ -1,6 +1,6 @@
 documentation_complete: true
 
-prodtype: rhel8,sle12,sle15
+prodtype: rhel7,rhel8,sle12,sle15
 
 title: "Ensure users' .netrc Files are not group or world accessible"
 
@@ -19,11 +19,13 @@ rationale: |-
 severity: medium
 
 identifiers:
+    cce@rhel7: CCE-89524-3
     cce@rhel8: CCE-87369-5
     cce@sle12: CCE-92446-4
     cce@sle15: CCE-92697-2
 
 references:
+    cis@rhel7: 6.2.11
     cis@rhel8: 6.2.13
     cis@sle12: 6.2.11
     cis@sle15: 6.2.11

diff --git a/shared/references/cce-redhat-avail.txt b/shared/references/cce-redhat-avail.txt
@@ -2785,7 +2785,6 @@ CCE-89520-1
 CCE-89521-9
 CCE-89522-7
 CCE-89523-5
-CCE-89524-3
 CCE-89525-0
 CCE-89526-8
 CCE-89527-6