From 39b3893a5fd4217ed3c5b09bbd017ac3caa85485 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20=C4=8Cern=C3=BD?= <jcerny@redhat.com>
Date: Wed, 24 Aug 2022 09:28:47 +0200
Subject: [PATCH 09/11] Merge pull request #9389 from
yuumasato/pam_pkcs11_not_available_s390x
Patch-name: scap-security-guide-0.1.64-pam_pkcs11_not_on_s390x-PR_9389.patch
Patch-status: Put smartcard rules with pam_pkcs11 out of s390x
---
.../smart_card_login/install_smartcard_packages/rule.yml | 2 ++
.../screen_locking/smart_card_login/smartcard_auth/rule.yml | 3 ++-
.../smartcard_configure_cert_checking/rule.yml | 3 +++
3 files changed, 7 insertions(+), 1 deletion(-)
diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml
index 9b33ac18a8..03fa6cccaa 100644
--- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/install_smartcard_packages/rule.yml
@@ -37,6 +37,8 @@ rationale: |-
severity: medium
+platform: not_s390x_arch
+
identifiers:
cce@rhel7: CCE-80519-2
cce@rhel8: CCE-84029-8
diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml
index 8153b31177..0f513b8972 100644
--- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_auth/rule.yml
@@ -28,7 +28,8 @@ rationale: |-
severity: medium
-platform: machine # The check uses service_... extended definition, which doesnt support offline mode
+platforms:
+ - not_s390x_arch
identifiers:
cce@rhel7: CCE-80207-4
diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml
index 49bd5d1762..e416d99372 100644
--- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml
+++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/smart_card_login/smartcard_configure_cert_checking/rule.yml
@@ -24,6 +24,9 @@ rationale: |-
severity: medium
+platforms:
+ - not_s390x_arch
+
identifiers:
cce@rhel7: CCE-80520-0
cce@rhel8: CCE-82475-5
--
2.37.2