update debian anssi profiles

ComplianceAsCode · Jul 11, 2024 · 2945d13 · 2945d13
1 parent d5438d5
commit 2945d13
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 0 deletions.
diff --git a/products/debian12/profiles/anssi_bp28_enhanced.profile b/products/debian12/profiles/anssi_bp28_enhanced.profile
@@ -34,6 +34,11 @@ selections:
  - '!accounts_polyinstantiated_tmp'
  - '!accounts_polyinstantiated_var_tmp'
  - '!enable_pam_namespace'
+ # there is no tmp.mount unit on Debian 12.
+ - '!systemd_tmp_mount_enabled'
+ # this rule cannot handle /etc/chrony/chrony.conf path properly.
+ # chronyd_specify_remote_server still report wether chrony is configured.
+ - '!chronyd_configure_pool_and_server'
 
  # Following rules once had a prodtype incompatible with the debian12 product
  - '!accounts_passwords_pam_tally2_deny_root'

diff --git a/products/debian12/profiles/anssi_bp28_high.profile b/products/debian12/profiles/anssi_bp28_high.profile
@@ -34,6 +34,11 @@ selections:
  - '!accounts_polyinstantiated_tmp'
  - '!accounts_polyinstantiated_var_tmp'
  - '!enable_pam_namespace'
+ # there is no tmp.mount unit on Debian 12.
+ - '!systemd_tmp_mount_enabled'
+ # this rule cannot handle /etc/chrony/chrony.conf path properly.
+ # chronyd_specify_remote_server still report wether chrony is configured.
+ - '!chronyd_configure_pool_and_server'
 
  # Following rules once had a prodtype incompatible with the debian12 product
  - '!accounts_passwords_pam_tally2_deny_root'

diff --git a/products/debian12/profiles/anssi_bp28_intermediary.profile b/products/debian12/profiles/anssi_bp28_intermediary.profile
@@ -30,6 +30,8 @@ selections:
  - '!accounts_polyinstantiated_tmp'
  - '!accounts_polyinstantiated_var_tmp'
  - '!enable_pam_namespace'
+ # there is no tmp.mount unit on Debian 12.
+ - '!systemd_tmp_mount_enabled'
 
  # Following rules once had a prodtype incompatible with the debian12 product
  - '!accounts_passwords_pam_tally2_deny_root'