Merge pull request #11401 from rain-Qing/anolis

Add anolis23/anolis8 support for pci-dss compliance.

Author: marcusburghardt

products/anolis23/profiles/pci-dss.profile

@@ -0,0 +1,37 @@
+documentation_complete: true
+
+metadata:
+    version: '4.0'
+    SMEs:
+        - hustliyilin
+        - rain-Qing
+
+reference: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
+
+title: 'PCI-DSS v4.0 Control Baseline for Anolis OS 23'
+
+description: |-
+    Payment Card Industry - Data Security Standard (PCI-DSS) is a set of
+    security standards designed to ensure the secure handling of payment card
+    data, with the goal of preventing data breaches and protecting sensitive
+    financial information.
+
+selections:
+    - pcidss_4:all
+    - '!package_audit-audispd-plugins_installed'
+    - '!rpm_verify_permissions'
+    - '!package_audit-audispd-plugins_installed'
+    - '!service_ntp_enabled'
+    - '!ntpd_specify_remote_server'
+    - '!ntpd_specify_multiple_servers'
+    - '!set_ipv6_loopback_traffic'
+    - '!set_loopback_traffic'
+    - '!service_ntpd_enabled'
+    - '!package_ypserv_removed'
+    - '!package_ypbind_removed'
+    - '!package_talk_removed'
+    - '!package_talk-server_removed'
+    - '!package_xinetd_removed'
+    - '!package_rsh_removed'
+    - '!package_rsh-server_removed'
+    - '!ensure_redhat_gpgkey_installed'

products/anolis8/profiles/pci-dss.profile

@@ -0,0 +1,34 @@
+documentation_complete: true
+
+metadata:
+    version: '4.0'
+    SMEs:
+        - hustliyilin
+        - rain-Qing
+
+reference: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
+
+title: 'PCI-DSS v4.0 Control Baseline for Anolis OS 8'
+
+description: |-
+    Payment Card Industry - Data Security Standard (PCI-DSS) is a set of
+    security standards designed to ensure the secure handling of payment card
+    data, with the goal of preventing data breaches and protecting sensitive
+    financial information.
+
+selections:
+    - pcidss_4:all
+    - '!rpm_verify_permissions'
+    - '!package_audit-audispd-plugins_installed'
+    - '!service_ntp_enabled'
+    - '!ntpd_specify_remote_server'
+    - '!ntpd_specify_multiple_servers'
+    - '!set_ipv6_loopback_traffic'
+    - '!set_loopback_traffic'
+    - '!service_ntpd_enabled'
+    - '!timer_logrotate_enabled'
+    - '!package_talk_removed'
+    - '!package_talk-server_removed'
+    - '!package_rsh_removed'
+    - '!package_rsh-server_removed'
+    - '!ensure_redhat_gpgkey_installed'