Merge pull request #14542 from mrkanon/enable_gpgcheck_for_all_repositories

Update OL08-00-010370 STIG ID rule selection

Author: Mab879

linux_os/guide/system/software/updating/enable_gpgcheck_for_all_repositories/ansible/shared.yml

@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel
+# platform = multi_platform_rhel,multi_platform_ol
 # reboot = false
 # strategy = enable
 # complexity = low

linux_os/guide/system/software/updating/enable_gpgcheck_for_all_repositories/bash/shared.sh

@@ -1,4 +1,4 @@
-# platform = multi_platform_rhel
+# platform = multi_platform_rhel,multi_platform_ol
 
 function replace_all_gpgcheck {
     sed -i 's/gpgcheck\s*=.*/gpgcheck=1/g' /etc/yum.repos.d/*

linux_os/guide/system/software/updating/enable_gpgcheck_for_all_repositories/rule.yml

@@ -23,6 +23,7 @@ identifiers:
 
 references:
     srg: SRG-OS-000366-GPOS-00153
+    stigid@ol8: OL08-00-010370
 
 ocil_clause: 'GPG checking is disabled'
 

linux_os/guide/system/software/updating/ensure_gpgcheck_globally_activated/rule.yml

@@ -56,7 +56,6 @@ references:
     pcidss: Req-6.2
     srg: SRG-OS-000366-GPOS-00153
     stigid@ol7: OL07-00-020050
-    stigid@ol8: OL08-00-010370
     stigid@sle12: SLES-12-010550
     stigid@sle15: SLES-15-010430
 

linux_os/guide/system/software/updating/ensure_gpgcheck_never_disabled/rule.yml

@@ -48,7 +48,6 @@ references:
     ospp: FPT_TUD_EXT.1,FPT_TUD_EXT.2
     pcidss: Req-6.2
     srg: SRG-OS-000366-GPOS-00153
-    stigid@ol8: OL08-00-010370
 
 ocil_clause: 'GPG checking is disabled'
 

products/ol8/profiles/stig.profile

@@ -249,8 +249,7 @@ selections:
     - aide_scan_notification
 
     # OL08-00-010370
-    - ensure_gpgcheck_globally_activated
-    - ensure_gpgcheck_never_disabled
+    - enable_gpgcheck_for_all_repositories
 
     # OL08-00-010371
     - ensure_gpgcheck_local_packages