Add more rules for SLE16 ANSSI profiles#14514

Draft

teacup-on-rockingchair wants to merge 18 commits intoComplianceAsCode:masterfrom

teacup-on-rockingchair:sle16_anssi_rules

Commits on Mar 1, 2026

Enable for sle16 package_kea_removed rule
teacup-on-rockingchair
committed
Enable for sle16 package_sendmail_removed rule
teacup-on-rockingchair
committed
Enable for sle16 service_chronyd_enabled rule
teacup-on-rockingchair
committed
Enable for sle16 package_xinetd_removed rule
teacup-on-rockingchair
committed
Enable for sle16 package_talk-server_removed rule
teacup-on-rockingchair
committed
Enable for sle16 package_talk_removed rule
teacup-on-rockingchair
committed
Add accounts_passwords_pam_faillock rules for sle16
teacup-on-rockingchair
committed
Adapt for SLE15/16 bash_ensure_pam_module_configuration macro
teacup-on-rockingchair
committed
Add accounts_password_pam_unix_rounds_password_auth rule and remediations for sle16
teacup-on-rockingchair
committed
Enabe for sle16 ensure_logrotate_activated rule
teacup-on-rockingchair
committed
Enable for sle16 sysctl_net_ipv6_conf_all_autoconf rule
teacup-on-rockingchair
committed
Enable sysctl_net_ipv4_conf_all_drop_gratuitous_arp for sle16
teacup-on-rockingchair
committed
Enable for sle16 sysctl_fs_protected* rules
teacup-on-rockingchair
committed
Enable for sle16 rule mount_option_tmp_noexec
teacup-on-rockingchair
committed
Enable sle16 specific checks and remediations for mount_option_tmp_noexec
teacup-on-rockingchair
committed
Add sysctl_kernel_unprivileged_bpf_disabled and sysctl_kernel_yama_ptrace_scope sysctl_net_core_bpf_jit_harden rules
teacup-on-rockingchair
committed
Enable more rules for SLE16 ANSSI
teacup-on-rockingchair
committed
Reserve for SLE16 CCE rules
teacup-on-rockingchair
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add more rules for SLE16 ANSSI profiles#14514

Add more rules for SLE16 ANSSI profiles#14514
teacup-on-rockingchair wants to merge 18 commits intoComplianceAsCode:masterfrom
teacup-on-rockingchair:sle16_anssi_rules

Commits on Mar 1, 2026

Enable for sle16 package_kea_removed rule

Enable for sle16 package_sendmail_removed rule

Enable for sle16 service_chronyd_enabled rule

Enable for sle16 package_xinetd_removed rule

Enable for sle16 package_talk-server_removed rule

Enable for sle16 package_talk_removed rule

Add accounts_passwords_pam_faillock rules for sle16

Adapt for SLE15/16 bash_ensure_pam_module_configuration macro

Add accounts_password_pam_unix_rounds_password_auth rule and remediations for sle16

Enabe for sle16 ensure_logrotate_activated rule

Enable for sle16 sysctl_net_ipv6_conf_all_autoconf rule

Enable sysctl_net_ipv4_conf_all_drop_gratuitous_arp for sle16

Enable for sle16 sysctl_fs_protected* rules

Enable for sle16 rule mount_option_tmp_noexec

Enable sle16 specific checks and remediations for mount_option_tmp_noexec

Add sysctl_kernel_unprivileged_bpf_disabled and sysctl_kernel_yama_ptrace_scope sysctl_net_core_bpf_jit_harden rules

Enable more rules for SLE16 ANSSI

Reserve for SLE16 CCE rules