@@ -12,13 +12,13 @@ description: |-
1212 Ensures PCI-DSS v4 security configuration settings are applied.
1313
1414selections:
15- - pcidss_4:all:base
16- - ensure_pam_wheel_group_empty
17- - sshd_strong_kex=pcidss
18- - sshd_approved_macs=cis_sle15
19- - sshd_approved_ciphers=cis_sle15
20- - var_multiple_time_servers=suse
21- - var_multiple_time_pools=suse
15+ - pcidss_4:all:base
16+ - ensure_pam_wheel_group_empty
17+ - sshd_strong_kex=pcidss
18+ - sshd_approved_macs=cis_sle15
19+ - sshd_approved_ciphers=cis_sle15
20+ - var_multiple_time_servers=suse
21+ - var_multiple_time_pools=suse
2222# Exclude from PCI DISS profile all rules related to ntp and timesyncd and keep only
2323# rules related to chrony
2424 - '!ntpd_specify_multiple_servers'
@@ -28,9 +28,9 @@ selections:
2828 - '!service_timesyncd_enabled'
2929 - '!package_libreswan_installed'
3030 - '!use_pam_wheel_for_su'
31- - use_pam_wheel_group_for_su
32- - var_pam_wheel_group_for_su=cis
33- - var_accounts_tmout=15_min
31+ - use_pam_wheel_group_for_su
32+ - var_pam_wheel_group_for_su=cis
33+ - var_accounts_tmout=15_min
3434# Following rules once had a prodtype incompatible with the sle15 product
3535 - '!aide_periodic_cron_checking'
3636 - '!accounts_password_pam_dcredit'
0 commit comments