update chronyd_specify_remote_server for debian

debian ships chrony configuration files under /etc/chrony/
ComplianceAsCode · Jul 11, 2024 · d5438d5 · d5438d5
1 parent 34011f7
commit d5438d5
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/linux_os/guide/services/ntp/chronyd_specify_remote_server/oval/shared.xml b/linux_os/guide/services/ntp/chronyd_specify_remote_server/oval/shared.xml
@@ -15,7 +15,8 @@
 
  <ind:textfilecontent54_object comment="Ensure at least one NTP server is set"
  id="object_chronyd_remote_server" version="1">
- <ind:filepath operation="pattern match">^/etc/chrony\.(conf|d/.+\.conf)$</ind:filepath>
+ <!-- ind:filepath operation="pattern match">^/etc/(?:chrony/)?chrony\.(conf|d/.+\.conf)$</ind:filepath -->
+ <ind:filepath operation="pattern match">^({{{ chrony_conf_path }}}|{{{ chrony_d_path }}}/.+\.conf)$</ind:filepath>
  <ind:pattern operation="pattern match">^[\s]*(?:server|pool)[\s]+.+$</ind:pattern>
  <ind:instance datatype="int">1</ind:instance>
  </ind:textfilecontent54_object>

diff --git a/products/debian12/product.yml b/products/debian12/product.yml
@@ -19,6 +19,9 @@ init_system: "systemd"
 
 oval_feed_url: "https://www.debian.org/security/oval/oval-definitions-bookworm.xml.bz2"
 
+chrony_conf_path: "/etc/chrony/chrony.conf"
+chrony_d_path: "/etc/chrony/chrony.d"
+
 cpes_root: "../../shared/applicability"
 cpes:
  - debian12: