Merge pull request #11295 from vojtapolasek/fix_pcidss_authselect

marcusburghardt · web-flow · commit c2b9581f290b · 2023-11-21T13:48:52.000+01:00
Daily prod fix: add enable_authselect rule to pci-dss control file
diff --git a/controls/pcidss_4.yml b/controls/pcidss_4.yml
@@ -2043,6 +2043,7 @@ controls:
         - base
       status: automated
       rules:
+        - enable_authselect
         - accounts_passwords_pam_faillock_deny
         - var_accounts_passwords_pam_faillock_deny=10
         - accounts_passwords_pam_faillock_unlock_time
diff --git a/tests/data/profile_stability/rhel8/pci-dss.profile b/tests/data/profile_stability/rhel8/pci-dss.profile
@@ -19,6 +19,7 @@ metadata:
     - vojtapolasek
 reference: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
 selections:
+- enable_authselect
 - package_sudo_installed
 - sshd_set_loglevel_verbose
 - accounts_password_warn_age_login_defs
