Merge pull request #9931 from rumch-se/package_rcpbind_removed

Added a new SLE 12/15's rule package_rcpbind_removed

controls/cis_sle12.yml

@@ -639,11 +639,10 @@ controls:
     levels:
       - l1_server
       - l1_workstation
-    automated: partially
-    notes: >-
-      Rule for package removal is missing!
+    status: automated
     rules:
       - service_rpcbind_disabled
+      - package_rcpbind_removed
 
   - id: 2.2.9
     title: Ensure DNS Server is not installed (Automated)

controls/cis_sle15.yml

@@ -620,11 +620,10 @@ controls:
     levels:
       - l1_server
       - l1_workstation
-    automated: partially
-    notes: >-
-      Rule for package removal is missing!
+    status: automated
     rules:
       - service_rpcbind_disabled
+      - package_rcpbind_removed
 
   - id: 2.2.9
     title: Ensure DNS Server is not installed (Automated)

linux_os/guide/services/nfs_and_rpc/disabling_nfs/disabling_nfs_services/package_rcpbind_removed/rule.yml

@@ -0,0 +1,37 @@
+documentation_complete: true
+
+prodtype: sle12,sle15
+
+title: 'Uninstall rcpbind Package'
+
+description: |-
+    The rpcbind utility maps RPC services to the ports on which they listen.
+    RPC processes notify rpcbind when they start, registering the ports they
+    are listening on and the RPC program numbers they expect to serve. The
+    rpcbind service redirects the client to the proper port number so it can
+    communicate with the requested service. If the system does not require RPC
+    (such as for NFS servers) then this service should be disabled.
+    {{{ describe_package_remove(package="rcpbind") }}}
+
+rationale: |-
+    If the system does not require rpc based services, it is recommended that
+    rpcbind be disabled to reduce the attack surface.
+
+severity: low
+
+identifiers:
+    cce@sle12: CCE-92312-8
+    cce@sle15: CCE-92467-0
+
+references:
+    cis@sle12: 2.2.8
+    cis@sle15: 2.2.8
+
+{{{ complete_ocil_entry_package(package="rcpbind") }}}
+
+fixtext: '{{{ fixtext_package_removed("rcpbind") }}}'
+
+template:
+    name: package_removed
+    vars:
+        pkgname: rcpbind

shared/references/cce-sle12-avail.txt

@@ -1,5 +1,4 @@
 CCE-92310-2
-CCE-92312-8
 CCE-92314-4
 CCE-92319-3
 CCE-92321-9

shared/references/cce-sle15-avail.txt

@@ -1,6 +1,5 @@
 CCE-92464-7
 CCE-92465-4
-CCE-92467-0
 CCE-92477-9
 CCE-92479-5
 CCE-92481-1