Merge pull request #6208 from jhrozek/cis-node

Decorate my recently added OCP4 CIS rules with CCE identifiers
ComplianceAsCode · Oct 13, 2020 · c919a4f · c919a4f
2 parents d03bbaa + 0810756
commit c919a4f
Show file tree

Hide file tree

Showing 7 changed files with 10 additions and 9 deletions.
diff --git a/applications/openshift/etcd/etcd_cert_file/rule.yml b/applications/openshift/etcd/etcd_cert_file/rule.yml
@@ -27,6 +27,7 @@ severity: medium
 
 identifiers:
     cce@ocp3: CCE-80577-0
+    cce@ocp4: CCE-83553-8
 
 references:
     cis: '2.1'

diff --git a/applications/openshift/kubelet/kubelet_anonymous_auth/rule.yml b/applications/openshift/kubelet/kubelet_anonymous_auth/rule.yml
@@ -30,6 +30,9 @@ severity: medium
 references:
     cis: 4.2.1
 
+identifiers:
+      cce@ocp4: CCE-83815-1
+
 ocil_clause: '<tt>anonymous</tt> authentication is not set to <tt>false</tt>'
 
 ocil: |-

diff --git a/applications/openshift/kubelet/kubelet_configure_tls_cert/rule.yml b/applications/openshift/kubelet/kubelet_configure_tls_cert/rule.yml
@@ -29,6 +29,7 @@ severity: medium
 
 identifiers:
     cce@ocp3: CCE-80596-0
+    cce@ocp4: CCE-83396-2
 
 references:
     cis@ocp3: 2.1.12

diff --git a/applications/openshift/kubelet/kubelet_disable_readonly_port/rule.yml b/applications/openshift/kubelet/kubelet_disable_readonly_port/rule.yml
@@ -47,6 +47,7 @@ ocil: |-
 
 identifiers:
     cce@ocp3: CCE-80601-8
+    cce@ocp4: CCE-83427-5
 
 references:
     cis@ocp3: 2.1.5

diff --git a/applications/openshift/worker/file_groupowner_worker_service/rule.yml b/applications/openshift/worker/file_groupowner_worker_service/rule.yml
@@ -23,8 +23,8 @@ rationale: |-
 
 severity: medium
 
-#identifiers:
-#    cce@ocp4: 80620-8
+identifiers:
+    cce@ocp4: CCE-83975-3
 
 references:
     cis: 4.1.2

diff --git a/applications/openshift/worker/file_permissions_worker_service/rule.yml b/applications/openshift/worker/file_permissions_worker_service/rule.yml
@@ -24,8 +24,8 @@ rationale: |-
 
 severity: medium
 
-#identifiers:
-#    cce@ocp4: 80620-8
+identifiers:
+    cce@ocp4: CCE-83455-6
 
 references:
     cis: 4.1.1

diff --git a/shared/references/cce-redhat-avail.txt b/shared/references/cce-redhat-avail.txt
@@ -68,7 +68,6 @@ CCE-83422-6
 CCE-83423-4
 CCE-83425-9
 CCE-83426-7
-CCE-83427-5
 CCE-83428-3
 CCE-83429-1
 CCE-83430-9
@@ -93,7 +92,6 @@ CCE-83451-5
 CCE-83452-3
 CCE-83453-1
 CCE-83454-9
-CCE-83455-6
 CCE-83456-4
 CCE-83457-2
 CCE-83458-0
@@ -169,7 +167,6 @@ CCE-83548-8
 CCE-83549-6
 CCE-83551-2
 CCE-83552-0
-CCE-83553-8
 CCE-83554-6
 CCE-83555-3
 CCE-83556-1
@@ -416,7 +413,6 @@ CCE-83811-0
 CCE-83812-8
 CCE-83813-6
 CCE-83814-4
-CCE-83815-1
 CCE-83816-9
 CCE-83817-7
 CCE-83818-5
@@ -568,7 +564,6 @@ CCE-83971-2
 CCE-83972-0
 CCE-83973-8
 CCE-83974-6
-CCE-83975-3
 CCE-83976-1
 CCE-83977-9
 CCE-83979-5