Add platform package clause for firewalld related rules

ComplianceAsCode · Jun 22, 2023 · 7172933 · 7172933
1 parent d365473
commit 7172933
Show file tree

Hide file tree

Showing 10 changed files with 17 additions and 3 deletions.
diff --git a/linux_os/guide/system/network/network-iptables/ensure_iptables_are_flushed/rule.yml b/linux_os/guide/system/network/network-iptables/ensure_iptables_are_flushed/rule.yml
@@ -14,6 +14,8 @@ rationale: |-
 
 severity: medium
 
+platform: package[iptables]
+
 identifiers:
     cce@sle15: CCE-92523-0
 

diff --git a/...de/system/network/network-iptables/iptables_activation/service_ip6tables_enabled/rule.yml b/...de/system/network/network-iptables/iptables_activation/service_ip6tables_enabled/rule.yml
@@ -11,6 +11,8 @@ rationale: |-
 
 severity: medium
 
+platform: package[iptables]
+
 identifiers:
     cce@rhel8: CCE-85955-3
     cce@rhel9: CCE-85960-3

diff --git a/...ide/system/network/network-iptables/iptables_activation/service_iptables_enabled/rule.yml b/...ide/system/network/network-iptables/iptables_activation/service_iptables_enabled/rule.yml
@@ -11,6 +11,8 @@ rationale: |-
 
 severity: medium
 
+platform: package[iptables]
+
 identifiers:
     cce@rhel8: CCE-85961-1
     cce@rhel9: CCE-85962-9

diff --git a/...e/system/network/network-iptables/iptables_activation/set_ip6tables_default_rule/rule.yml b/...e/system/network/network-iptables/iptables_activation/set_ip6tables_default_rule/rule.yml
@@ -20,7 +20,7 @@ rationale: |-
 
 severity: medium
 
-platform: not package[nftables] and not package[ufw]
+platform: not package[nftables] and not package[ufw] and package[iptables]
 
 identifiers:
     cce@rhel7: CCE-86718-4

diff --git a/...de/system/network/network-iptables/iptables_activation/set_ipv6_loopback_traffic/rule.yml b/...de/system/network/network-iptables/iptables_activation/set_ipv6_loopback_traffic/rule.yml
@@ -16,7 +16,7 @@ rationale: |-
 
 severity: medium
 
-platform: not package[nftables] and not package[ufw]
+platform: not package[nftables] and not package[ufw] and package[iptables]
 
 identifiers:
     cce@sle12: CCE-92215-3

diff --git a/...s/guide/system/network/network-iptables/iptables_activation/set_loopback_traffic/rule.yml b/...s/guide/system/network/network-iptables/iptables_activation/set_loopback_traffic/rule.yml
@@ -16,7 +16,7 @@ rationale: |-
 
 severity: medium
 
-platform: not package[nftables] and not package[ufw]
+platform: not package[nftables] and not package[ufw] and package[iptables]
 
 identifiers:
     cce@sle12: CCE-92214-6

diff --git a/...x_os/guide/system/network/network-iptables/package_iptables-persistent_installed/rule.yml b/...x_os/guide/system/network/network-iptables/package_iptables-persistent_installed/rule.yml
@@ -13,6 +13,8 @@ rationale: |-
 
 severity: medium
 
+platform: package[iptables]
+
 references:
     cis@ubuntu2004: 3.5.3.1.1
     cis@ubuntu2204: 3.5.3.1.1

diff --git a/linux_os/guide/system/network/network-iptables/package_iptables-persistent_removed/rule.yml b/linux_os/guide/system/network/network-iptables/package_iptables-persistent_removed/rule.yml
@@ -13,6 +13,8 @@ rationale: |-
 
 severity: medium
 
+platform: package[iptables]
+
 references:
     cis@ubuntu2004: 3.5.1.2
     cis@ubuntu2204: 3.5.1.2

diff --git a/linux_os/guide/system/network/network-iptables/package_iptables-services_installed/rule.yml b/linux_os/guide/system/network/network-iptables/package_iptables-services_installed/rule.yml
@@ -15,6 +15,8 @@ rationale: |-
 
 severity: medium
 
+platform: package[iptables]
+
 identifiers:
     cce@rhel8: CCE-85982-7
 

diff --git a/linux_os/guide/system/network/network-iptables/package_iptables-services_removed/rule.yml b/linux_os/guide/system/network/network-iptables/package_iptables-services_removed/rule.yml
@@ -16,6 +16,8 @@ rationale: |-
 
 severity: medium
 
+platform: package[iptables]
+
 identifiers:
     cce@rhel7: CCE-86678-0
     cce@rhel8: CCE-86679-8