Merge pull request #14126 from Xeicker/update_ol_profiles

jan-cerny · web-flow · commit d3d27664def3 · 2025-11-28T16:30:30.000+01:00
Update OL profiles for not applicable rules
diff --git a/controls/ccn_ol9.yml b/controls/ccn_ol9.yml
@@ -624,9 +624,9 @@ controls:
           - dconf_gnome_banner_enabled
           - dconf_gnome_login_banner_text
           - sshd_enable_warning_banner_net
-          - login_banner_text=cis_banners
-          - motd_banner_text=cis_banners
-          - remote_login_banner_text=cis_banners
+          - login_banner_text=default
+          - motd_banner_text=default
+          - remote_login_banner_text=default
 
     - id: A.11.SEC-OL5
       title: Network Acess to the System is Controlled
diff --git a/controls/ism_o.yml b/controls/ism_o.yml
@@ -604,6 +604,7 @@ controls:
           - ensure_gpgcheck_local_packages
           - ensure_gpgcheck_never_disabled
           - ensure_redhat_gpgkey_installed
+          - ensure_oracle_gpgkey_installed
           - dnf-automatic_security_updates_only
       status: automated
 
diff --git a/products/ol10/profiles/ism_o_secret.profile b/products/ol10/profiles/ism_o_secret.profile
@@ -84,3 +84,4 @@ selections:
     - '!package_rear_installed'
     - '!package_ypbind_removed'
     - '!package_xinetd_removed'
+    - '!ensure_redhat_gpgkey_installed'
diff --git a/products/ol10/profiles/ism_o_top_secret.profile b/products/ol10/profiles/ism_o_top_secret.profile
@@ -84,3 +84,4 @@ selections:
     - '!package_rear_installed'
     - '!package_ypbind_removed'
     - '!package_xinetd_removed'
+    - '!ensure_redhat_gpgkey_installed'
diff --git a/products/ol8/profiles/ospp.profile b/products/ol8/profiles/ospp.profile
@@ -206,3 +206,4 @@ selections:
     - '!zipl_audit_backlog_limit_argument'
     - '!zipl_bls_entries_only'
     - '!zipl_bootmap_is_up_to_date'
+    - '!package_libreport-plugin-rhtsupport_removed'
diff --git a/products/rhel10/profiles/ism_o.profile b/products/rhel10/profiles/ism_o.profile
@@ -60,3 +60,4 @@ selections:
     - '!package_ypbind_removed'
     - '!package_xinetd_removed'
     - '!service_xinetd_disabled'
+    - '!ensure_oracle_gpgkey_installed'
diff --git a/products/rhel10/profiles/ism_o_secret.profile b/products/rhel10/profiles/ism_o_secret.profile
@@ -62,3 +62,4 @@ selections:
     - '!package_ypbind_removed'
     - '!package_xinetd_removed'
     - '!service_xinetd_disabled'
+    - '!ensure_oracle_gpgkey_installed'
diff --git a/products/rhel10/profiles/ism_o_top_secret.profile b/products/rhel10/profiles/ism_o_top_secret.profile
@@ -60,3 +60,4 @@ selections:
     - '!package_ypbind_removed'
     - '!package_xinetd_removed'
     - '!service_xinetd_disabled'
+    - '!ensure_oracle_gpgkey_installed'
diff --git a/products/rhel8/profiles/ism_o.profile b/products/rhel8/profiles/ism_o.profile
@@ -76,6 +76,7 @@ selections:
     - '!sssd_enable_smartcards'
     - '!system_booted_in_fips_mode'
     - '!sshd_use_directory_configuration'
+    - '!ensure_oracle_gpgkey_installed'
     # Adjust variables to match the origianl RHEL 8 profiles
     - var_password_hashing_algorithm_pam=sha512
     - var_accounts_password_minlen_login_defs=15
diff --git a/products/rhel9/profiles/ism_o.profile b/products/rhel9/profiles/ism_o.profile
@@ -79,3 +79,4 @@ selections:
     - '!package_ypbind_removed'
     - '!package_xinetd_removed'
     - '!service_xinetd_disabled'
+    - '!ensure_oracle_gpgkey_installed'
