Add rule service_slapd_disabled

controls/cis_rhel8.yml

@@ -706,14 +706,14 @@ controls:
     rules:
       - service_rpcbind_disabled
 
-  # NEEDS RULE
-  # https://github.com/ComplianceAsCode/content/issues/5231
   - id: 2.2.14
     title: Ensure LDAP server is not enabled (Automated)
     levels:
       - l1_server
       - l1_workstation
-    automated: no
+    status: automated
+    rules:
+      - service_slapd_disabled
 
   - id: 2.2.15
     title: Ensure DHCP Server is not enabled (Automated)

linux_os/guide/services/ldap/openldap_server/service_slapd_disabled/rule.yml

@@ -0,0 +1,32 @@
+documentation_complete: true
+
+prodtype: rhel8,rhel9
+
+title: 'Disable LDAP Server (slapd)'
+
+description: |-
+    The Lightweight Directory Access Protocol (LDAP) is a service that provides a method for looking up information from a central database.
+
+rationale: |-
+    If the system will not need to act as an LDAP server, it is recommended that the software be
+    disabled to reduce the potential attack surface.
+
+severity: medium
+
+identifiers:
+    cce@rhel8: CCE-87262-2
+    cce@rhel9: CCE-87263-0
+
+references:
+    cis@rhel8: 2.2.14
+
+ocil: |-
+    {{{ ocil_service_disabled(service="slapd") }}}
+
+platform: machine
+
+template:
+    name: service_disabled
+    vars:
+        servicename: slapd
+        packagename: openldap-servers

shared/references/cce-redhat-avail.txt

@@ -1332,8 +1332,6 @@ CCE-87258-0
 CCE-87259-8
 CCE-87260-6
 CCE-87261-4
-CCE-87262-2
-CCE-87263-0
 CCE-87264-8
 CCE-87265-5
 CCE-87266-3