Merge pull request #10696 from rumch-se/fix_in_package_libreswan_inst…

…alled Removal of package_libreswan_installed from SLE 12/15 profiles
ComplianceAsCode · Jun 21, 2023 · 2f50cab · 2f50cab
2 parents 9d3c8df + 54355d1
commit 2f50cab
Show file tree

Hide file tree

Showing 5 changed files with 7 additions and 2 deletions.
diff --git a/linux_os/guide/system/network/network-ipsec/package_libreswan_installed/rule.yml b/linux_os/guide/system/network/network-ipsec/package_libreswan_installed/rule.yml
@@ -5,9 +5,10 @@ prodtype: alinux2,alinux3,anolis8,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rh
 title: 'Install libreswan Package'
 
 description: |-
-    The Libreswan package provides an implementation of IPsec
+    The libreswan package provides an implementation of IPsec
     and IKE, which permits the creation of secure tunnels over
     untrusted networks. {{{ describe_package_install(package="libreswan") }}}
+    
 
 rationale: |-
     Providing the ability for remote users or systems
@@ -45,8 +46,8 @@ fixtext: '{{{ fixtext_package_installed("libreswan") }}}'
 
 srg_requirement: '{{{ srg_requirement_package_installed("libreswan") }}}'
 
+
 template:
     name: package_installed
     vars:
         pkgname: libreswan
-
diff --git a/products/sle12/profiles/pci-dss-4.profile b/products/sle12/profiles/pci-dss-4.profile
@@ -64,6 +64,7 @@ selections:
     -  package_openldap-servers_removed
     -  package_rsh_removed
     -  package_samba_removed
+    -  '!package_libreswan_installed'
     -  package_talk_removed
     -  package_telnet_removed
     -  package_xinetd_removed

diff --git a/products/sle12/profiles/pci-dss.profile b/products/sle12/profiles/pci-dss.profile
@@ -25,3 +25,4 @@ selections:
     - '!service_ntp_enabled'
     - '!service_ntpd_enabled'
     - '!service_timesyncd_enabled'
+    - '!package_libreswan_installed'
diff --git a/products/sle15/profiles/pci-dss-4.profile b/products/sle15/profiles/pci-dss-4.profile
@@ -25,3 +25,4 @@ selections:
     - '!service_ntp_enabled'
     - '!service_ntpd_enabled'
     - '!service_timesyncd_enabled'
+    - '!package_libreswan_installed'
diff --git a/products/sle15/profiles/pci-dss.profile b/products/sle15/profiles/pci-dss.profile
@@ -25,3 +25,4 @@ selections:
     - '!service_ntp_enabled'
     - '!service_ntpd_enabled'
     - '!service_timesyncd_enabled'
+    - '!package_libreswan_installed'