-{{% if product in ['sle12', 'sle15'] %}}
+{{% if product in ["sle12", "sle15", "slmicro5"] %}}
^/etc/pam.d/.*$
{{% elif 'ubuntu' in product %}}
^/etc/pam.d/common-password
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/rule.yml
index 146d5983875..6b7e29f2652 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords/rule.yml
@@ -7,7 +7,7 @@ description: |-
but does not have an assigned password, it may be possible to log
into the account without authentication. Remove any instances of the
nullok in
- {{% if product in ["sle12", "sle15"] %}}
+ {{% if product in ["sle12", "sle15", "slmicro5"] %}}
password authentication configurations in /etc/pam.d/
{{% elif 'ubuntu' in product %}}
/etc/pam.d/common-password
@@ -33,6 +33,7 @@ identifiers:
cce@rhel10: CCE-86640-0
cce@sle12: CCE-83039-8
cce@sle15: CCE-85576-7
+ cce@slmicro5: CCE-93738-3
references:
cis-csc: 1,12,13,14,15,16,18,3,5
@@ -62,7 +63,7 @@ ocil_clause: 'NULL passwords can be used'
ocil: |-
To verify that null passwords cannot be used, run the following command:
- {{% if product in ["sle12", "sle15"] %}}
+ {{% if product in ["sle12", "sle15", "slmicro5"] %}}
$ grep pam_unix.so /etc/pam.d/* | grep nullok
{{% elif 'ubuntu' in product %}}
grep nullok /etc/pam.d/common-password
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords_etc_shadow/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords_etc_shadow/rule.yml
index 1a64a9d5605..5eca22667fd 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords_etc_shadow/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-restrictions/password_storage/no_empty_passwords_etc_shadow/rule.yml
@@ -29,6 +29,7 @@ identifiers:
cce@rhel10: CCE-90491-2
cce@sle12: CCE-83249-3
cce@sle15: CCE-91155-2
+ cce@slmicro5: CCE-93737-5
references:
cis@ubuntu2204: 6.2.2
diff --git a/linux_os/guide/system/accounts/accounts-session/accounts_have_homedir_login_defs/rule.yml b/linux_os/guide/system/accounts/accounts-session/accounts_have_homedir_login_defs/rule.yml
index 6da117a36b6..1c0e2ca284c 100644
--- a/linux_os/guide/system/accounts/accounts-session/accounts_have_homedir_login_defs/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-session/accounts_have_homedir_login_defs/rule.yml
@@ -23,6 +23,7 @@ identifiers:
cce@rhel10: CCE-88604-4
cce@sle12: CCE-83053-9
cce@sle15: CCE-85562-7
+ cce@slmicro5: CCE-93736-7
references:
disa: CCI-000366