Final adjustments to the OSPP control file based on RHEL9.

ComplianceAsCode · Sep 6, 2024 · c302000 · c302000
1 parent 136b977
commit c302000
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/controls/ospp.yml b/controls/ospp.yml
@@ -45,9 +45,12 @@ controls:
             - audit_access_failed
             - audit_access_failed_aarch64
             - audit_access_failed_ppc64le
-            - audit_access_success
-            - audit_access_success_aarch64
-            - audit_access_success_ppc64le
+            - audit_access_success.role=unscored
+            - audit_access_success.severity=info
+            - audit_access_success_aarch64.role=unscored
+            - audit_access_success_aarch64.severity=info
+            - audit_access_success_ppc64le.role=unscored
+            - audit_access_success_ppc64le.severity=info
             - audit_create_failed
             - audit_create_failed_aarch64
             - audit_create_failed_ppc64le
@@ -373,6 +376,7 @@ controls:
             - package_chrony_installed
             - configure_usbguard_auditbackend
             - package_fapolicyd_installed
+            - package_usbguard_installed
             - service_usbguard_enabled
             - usbguard_allow_hid_and_hub
             - accounts_password_pam_dcredit