Merge pull request #9214 from vojtapolasek/install_postfix_rule_stabi…

…lization add new rule package_postfix_installed (stabilization)
ComplianceAsCode · Jul 25, 2022 · 5caa381 · 5caa381
2 parents 74001e6 + cea07f2
commit 5caa381
Show file tree

Hide file tree

Showing 11 changed files with 45 additions and 2 deletions.
diff --git a/linux_os/guide/services/mail/package_postfix_installed/rule.yml b/linux_os/guide/services/mail/package_postfix_installed/rule.yml
@@ -0,0 +1,34 @@
+documentation_complete: true
+
+title: 'The Postfix package is installed'
+
+description: |-
+    A mail server is required for sending emails.
+    {{{ describe_package_install(package="postfix") }}}
+
+rationale: |-
+    Emails can be used to notify designated personnel about important
+    system events such as failures or warnings.
+
+severity: medium
+
+identifiers:
+    cce@rhel8: CCE-85983-5
+    cce@rhel9: CCE-85984-3
+
+references:
+    srg: SRG-OS-000046-GPOS-00022
+    stigid@rhel8: RHEL-08-030030
+
+ocil_clause: 'the package is not installed'
+
+ocil: '{{{ ocil_package(package="postfix") }}}'
+
+fixtext: '{{{ describe_package_install(package="postfix") }}}'
+
+srg_requirement: '{{{ srg_requirement_package_installed("postfix") }}}'
+
+template:
+    name: package_installed
+    vars:
+        pkgname: postfix
diff --git a/...guide/services/mail/postfix_client/postfix_client_configure_mail_alias/ansible/shared.yml b/...guide/services/mail/postfix_client/postfix_client_configure_mail_alias/ansible/shared.yml
@@ -13,3 +13,6 @@
     create: true
     state: present
 
+- name: Update postfix aliases
+  ansible.builtin.command:
+    cmd: newaliases
diff --git a/...de/services/mail/postfix_client/postfix_client_configure_mail_alias/tests/correct.pass.sh b/...de/services/mail/postfix_client/postfix_client_configure_mail_alias/tests/correct.pass.sh
@@ -1,3 +1,4 @@
 #!/bin/bash
+# packages = postfix
 
 echo "root: system.administrator@mail.mil" > /etc/aliases
diff --git a/...rvices/mail/postfix_client/postfix_client_configure_mail_alias/tests/file_missing.fail.sh b/...rvices/mail/postfix_client/postfix_client_configure_mail_alias/tests/file_missing.fail.sh
@@ -1,3 +1,4 @@
 #!/bin/bash
+# packages = postfix
 
 rm -f /etc/aliases
diff --git a/...vices/mail/postfix_client/postfix_client_configure_mail_alias/tests/no_root_alias.fail.sh b/...vices/mail/postfix_client/postfix_client_configure_mail_alias/tests/no_root_alias.fail.sh
@@ -1,3 +1,4 @@
 #!/bin/bash
+# packages = postfix
 
 sed -i '/root/d' /etc/aliases
diff --git a/...uide/services/mail/postfix_client/postfix_client_configure_mail_alias/tests/wrong.fail.sh b/...uide/services/mail/postfix_client/postfix_client_configure_mail_alias/tests/wrong.fail.sh
@@ -1,3 +1,4 @@
 #!/bin/bash
+# packages = postfix
 
 echo "root: invalid_address" > /etc/aliases
diff --git a/products/rhel8/profiles/stig.profile b/products/rhel8/profiles/stig.profile
@@ -673,6 +673,7 @@ selections:
 
     # RHEL-08-030030
     - postfix_client_configure_mail_alias_postmaster
+    - package_postfix_installed
 
     # RHEL-08-030040
     - auditd_data_disk_error_action

diff --git a/products/rhel9/profiles/stig.profile b/products/rhel9/profiles/stig.profile
@@ -644,6 +644,7 @@ selections:
 
     # RHEL-08-030030
     - postfix_client_configure_mail_alias
+    - package_postfix_installed
 
     # RHEL-08-030040
     - auditd_data_disk_error_action

diff --git a/shared/references/cce-redhat-avail.txt b/shared/references/cce-redhat-avail.txt
@@ -1,5 +1,3 @@
-CCE-85983-5
-CCE-85984-3
 CCE-85985-0
 CCE-85988-4
 CCE-85997-5

diff --git a/tests/data/profile_stability/rhel8/stig.profile b/tests/data/profile_stability/rhel8/stig.profile
@@ -309,6 +309,7 @@ selections:
 - package_opensc_installed
 - package_openssh-server_installed
 - package_policycoreutils_installed
+- package_postfix_installed
 - package_python3-abrt-addon_removed
 - package_rng-tools_installed
 - package_rsh-server_removed

diff --git a/tests/data/profile_stability/rhel8/stig_gui.profile b/tests/data/profile_stability/rhel8/stig_gui.profile
@@ -319,6 +319,7 @@ selections:
 - package_opensc_installed
 - package_openssh-server_installed
 - package_policycoreutils_installed
+- package_postfix_installed
 - package_python3-abrt-addon_removed
 - package_rng-tools_installed
 - package_rsh-server_removed