Skip to content

Commit

Permalink
Add alinux2/alinux3 support for pci-dss compliance.
Browse files Browse the repository at this point in the history
Signed-off-by: YuQing.Yang <yangyuqing6@qq.com>
Signed-off-by: YiLin.Li <YiLin.Li@linux.alibaba.com>
  • Loading branch information
rain-Qing authored and YuQing Yang committed Dec 19, 2023
1 parent ebf95fc commit d684772
Show file tree
Hide file tree
Showing 2 changed files with 61 additions and 0 deletions.
27 changes: 27 additions & 0 deletions products/alinux2/profiles/pci-dss.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
documentation_complete: true

metadata:
version: '4.0'
SMEs:
- YiLin.Li
- YuQing.Yang

reference: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf

title: 'PCI-DSS v4.0 Control Baseline for Alibaba Cloud Linux 2'

description: |-
Payment Card Industry - Data Security Standard (PCI-DSS) is a set of
security standards designed to ensure the secure handling of payment card
data, with the goal of preventing data breaches and protecting sensitive
financial information.

selections:
- pcidss_4:all
- '!rpm_verify_permissions'
- '!package_audit-audispd-plugins_installed'
- '!service_ntp_enabled'
- '!set_ipv6_loopback_traffic'
- '!set_loopback_traffic'
- '!timer_logrotate_enabled'
- '!ensure_redhat_gpgkey_installed'
34 changes: 34 additions & 0 deletions products/alinux3/profiles/pci-dss.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
documentation_complete: true

metadata:
version: '4.0'
SMEs:
- YiLin.Li
- YuQing.Yang

reference: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf

title: 'PCI-DSS v4.0 Control Baseline for Alibaba Cloud Linux 3'

description: |-
Payment Card Industry - Data Security Standard (PCI-DSS) is a set of
security standards designed to ensure the secure handling of payment card
data, with the goal of preventing data breaches and protecting sensitive
financial information.

selections:
- pcidss_4:all
- '!rpm_verify_permissions'
- '!package_audit-audispd-plugins_installed'
- '!service_ntp_enabled'
- '!ntpd_specify_remote_server'
- '!ntpd_specify_multiple_servers'
- '!set_ipv6_loopback_traffic'
- '!set_loopback_traffic'
- '!service_ntpd_enabled'
- '!timer_logrotate_enabled'
- '!package_talk_removed'
- '!package_talk-server_removed'
- '!package_rsh_removed'
- '!package_rsh-server_removed'
- '!ensure_redhat_gpgkey_installed'

0 comments on commit d684772

Please sign in to comment.