Merge branch 'ComplianceAsCode:master' into patch-1

CoreyCook8 · Feb 8, 2024 · 94fb5ca · 94fb5ca
2 parents 4ba6fa7 + 17ea373
commit 94fb5ca
Show file tree

Hide file tree

Showing 379 changed files with 2 additions and 521 deletions.
diff --git a/controls/anssi.yml b/controls/anssi.yml
@@ -14,6 +14,7 @@ levels:
   - id: high
     inherits_from:
     - enhanced
+reference_type: anssi
 
 controls:
   - id: R1

diff --git a/linux_os/guide/services/apt/apt_conf_disallow_unauthenticated/rule.yml b/linux_os/guide/services/apt/apt_conf_disallow_unauthenticated/rule.yml
@@ -13,5 +13,4 @@ rationale: |-
 severity: unknown
 
 references:
-    anssi: BP28(R15)
     stigid@ubuntu2004: UBTU-20-010438
diff --git a/linux_os/guide/services/apt/apt_sources_list_official/rule.yml b/linux_os/guide/services/apt/apt_sources_list_official/rule.yml
@@ -12,6 +12,3 @@ rationale: |-
         updates are integrated soon enough.
 
 severity: unknown
-
-references:
-    anssi: BP28(R15)
diff --git a/linux_os/guide/services/cron_and_at/package_cron_installed/rule.yml b/linux_os/guide/services/cron_and_at/package_cron_installed/rule.yml
@@ -19,7 +19,6 @@ identifiers:
     cce@sle15: CCE-91379-8
 
 references:
-    anssi: BP28(R50)
     cis-csc: 11,14,3,9
     cis@sle12: 5.1.1
     cis@sle15: 5.1.1

diff --git a/linux_os/guide/services/deprecated/package_inetutils-telnetd_removed/rule.yml b/linux_os/guide/services/deprecated/package_inetutils-telnetd_removed/rule.yml
@@ -13,7 +13,6 @@ rationale: |-
 severity: high
 
 references:
-    anssi: NT007(R03)
     cis-csc: 11,12,14,15,3,8,9
     cobit5: APO13.01,BAI10.01,BAI10.02,BAI10.03,BAI10.05,DSS01.04,DSS05.02,DSS05.03,DSS05.05,DSS06.06
     isa-62443-2009: 4.3.3.5.1,4.3.3.5.2,4.3.3.5.3,4.3.3.5.4,4.3.3.5.5,4.3.3.5.6,4.3.3.5.7,4.3.3.5.8,4.3.3.6.1,4.3.3.6.2,4.3.3.6.3,4.3.3.6.4,4.3.3.6.5,4.3.3.6.6,4.3.3.6.7,4.3.3.6.8,4.3.3.6.9,4.3.3.7.1,4.3.3.7.2,4.3.3.7.3,4.3.3.7.4,4.3.4.3.2,4.3.4.3.3

diff --git a/linux_os/guide/services/deprecated/package_telnetd-ssl_removed/rule.yml b/linux_os/guide/services/deprecated/package_telnetd-ssl_removed/rule.yml
@@ -12,7 +12,6 @@ rationale: |-
 severity: high
 
 references:
-    anssi: NT007(R02)
     cis-csc: 11,12,14,15,3,8,9
     cobit5: APO13.01,BAI10.01,BAI10.02,BAI10.03,BAI10.05,DSS01.04,DSS05.02,DSS05.03,DSS05.05,DSS06.06
     isa-62443-2009: 4.3.3.5.1,4.3.3.5.2,4.3.3.5.3,4.3.3.5.4,4.3.3.5.5,4.3.3.5.6,4.3.3.5.7,4.3.3.5.8,4.3.3.6.1,4.3.3.6.2,4.3.3.6.3,4.3.3.6.4,4.3.3.6.5,4.3.3.6.6,4.3.3.6.7,4.3.3.6.8,4.3.3.6.9,4.3.3.7.1,4.3.3.7.2,4.3.3.7.3,4.3.3.7.4,4.3.4.3.2,4.3.4.3.3

diff --git a/linux_os/guide/services/deprecated/package_telnetd_removed/rule.yml b/linux_os/guide/services/deprecated/package_telnetd_removed/rule.yml
@@ -17,7 +17,6 @@ identifiers:
     cce@rhel8: CCE-83302-0
 
 references:
-    anssi: BP28(R1),NT007(R03)
     cis-csc: 11,12,14,15,3,8,9
     cobit5: APO13.01,BAI10.01,BAI10.02,BAI10.03,BAI10.05,DSS01.04,DSS05.02,DSS05.03,DSS05.05,DSS06.06
     isa-62443-2009: 4.3.3.5.1,4.3.3.5.2,4.3.3.5.3,4.3.3.5.4,4.3.3.5.5,4.3.3.5.6,4.3.3.5.7,4.3.3.5.8,4.3.3.6.1,4.3.3.6.2,4.3.3.6.3,4.3.3.6.4,4.3.3.6.5,4.3.3.6.6,4.3.3.6.7,4.3.3.6.8,4.3.3.6.9,4.3.3.7.1,4.3.3.7.2,4.3.3.7.3,4.3.3.7.4,4.3.4.3.2,4.3.4.3.3

diff --git a/linux_os/guide/services/dhcp/disabling_dhcp_client/package_dhcp_client_removed/rule.yml b/linux_os/guide/services/dhcp/disabling_dhcp_client/package_dhcp_client_removed/rule.yml
@@ -20,7 +20,6 @@ identifiers:
     cce@sle15: CCE-92511-5
 
 references:
-    anssi: BP28(R1)
     cis@sle12: 2.2.5
     cis@sle15: 2.2.5
     cobit5: BAI10.01,BAI10.02,BAI10.03,BAI10.05,DSS05.02,DSS05.05,DSS06.06

diff --git a/linux_os/guide/services/dhcp/disabling_dhcp_server/package_dhcp_removed/rule.yml b/linux_os/guide/services/dhcp/disabling_dhcp_server/package_dhcp_removed/rule.yml
@@ -28,7 +28,6 @@ identifiers:
     cce@sle15: CCE-85759-9
 
 references:
-    anssi: BP28(R1)
     cis-csc: 11,14,3,9
     cis@sle12: 2.2.5
     cis@sle15: 2.2.5

diff --git a/linux_os/guide/services/mail/package_sendmail_removed/rule.yml b/linux_os/guide/services/mail/package_sendmail_removed/rule.yml
@@ -23,7 +23,6 @@ identifiers:
     cce@sle15: CCE-85761-5
 
 references:
-    anssi: BP28(R1)
     cis-csc: 11,14,3,9
     cobit5: BAI10.01,BAI10.02,BAI10.03,BAI10.05,DSS05.02,DSS05.05,DSS06.06
     disa: CCI-000381

diff --git a/linux_os/guide/services/mail/postfix_client/postfix_client_configure_mail_alias/rule.yml b/linux_os/guide/services/mail/postfix_client/postfix_client_configure_mail_alias/rule.yml
@@ -26,7 +26,6 @@ identifiers:
     cce@sle15: CCE-85605-4
 
 references:
-    anssi: BP28(R49)
     disa: CCI-000139,CCI-000366
     nist: CM-6(a)
     nist@sle12: AU-5(a),AU-5.1(ii)

diff --git a/linux_os/guide/services/mail/postfix_client/postfix_network_listening_disabled/rule.yml b/linux_os/guide/services/mail/postfix_client/postfix_network_listening_disabled/rule.yml
@@ -23,7 +23,6 @@ identifiers:
     cce@sle15: CCE-91280-8
 
 references:
-    anssi: BP28(R48)
     cis-csc: 11,14,3,9
     cis@sle12: 2.2.16
     cis@sle15: 2.2.16

diff --git a/linux_os/guide/services/ntp/chronyd_configure_pool_and_server/rule.yml b/linux_os/guide/services/ntp/chronyd_configure_pool_and_server/rule.yml
@@ -26,7 +26,6 @@ identifiers:
     cce@sle15: CCE-92526-3 
 
 references:
-    anssi: BP28(R71)
     cis@sle12: 2.2.1.3
     cis@sle15: 2.2.1.3
     disa:  CCI-000160,CCI-001891

diff --git a/linux_os/guide/services/ntp/chronyd_specify_remote_server/rule.yml b/linux_os/guide/services/ntp/chronyd_specify_remote_server/rule.yml
@@ -29,7 +29,6 @@ identifiers:
     cce@sle15: CCE-85833-2
 
 references:
-    anssi: BP28(R71)
     ccn@rhel9: A.3.SEC-RHEL3
     cis@sle12: 2.2.1.3
     cis@sle15: 2.2.1.3

diff --git a/linux_os/guide/services/ntp/package_chrony_installed/rule.yml b/linux_os/guide/services/ntp/package_chrony_installed/rule.yml
@@ -25,7 +25,6 @@ identifiers:
     cce@sle15: CCE-91229-5
 
 references:
-    anssi: BP28(R71)
     ccn@rhel9: A.3.SEC-RHEL3
     cis@sle12: 2.2.1.1
     cis@sle15: 2.2.1.1

diff --git a/linux_os/guide/services/ntp/package_ntp_installed/rule.yml b/linux_os/guide/services/ntp/package_ntp_installed/rule.yml
@@ -13,7 +13,6 @@ identifiers:
     cce@sle15: CCE-91293-1
 
 references:
-    anssi: NT012(R03)
     cis-csc: 1,14,15,16,3,5,6
     cis@ubuntu2004: 2.2.1.1
     cis@ubuntu2204: 2.1.1.1

diff --git a/linux_os/guide/services/ntp/package_timesyncd_installed/rule.yml b/linux_os/guide/services/ntp/package_timesyncd_installed/rule.yml
@@ -10,7 +10,6 @@ rationale: 'Time synchronization (using NTP) is required by almost all network a
 severity: high
 
 references:
-    anssi: NT012(R03)
     cis-csc: 1,14,15,16,3,5,6
     cis@ubuntu2004: 2.2.1.1
     cis@ubuntu2204: 2.1.1.1

diff --git a/linux_os/guide/services/ntp/service_chronyd_or_ntpd_enabled/rule.yml b/linux_os/guide/services/ntp/service_chronyd_or_ntpd_enabled/rule.yml
@@ -46,7 +46,6 @@ identifiers:
     cce@sle15: CCE-85835-7
 
 references:
-    anssi: BP28(R71)
     cis-csc: 1,14,15,16,3,5,6
     cobit5: APO11.04,BAI03.05,DSS05.04,DSS05.07,MEA02.01
     cui: 3.3.7

diff --git a/linux_os/guide/services/ntp/service_ntp_enabled/rule.yml b/linux_os/guide/services/ntp/service_ntp_enabled/rule.yml
@@ -27,7 +27,6 @@ identifiers:
     cce@sle15: CCE-91294-9
 
 references:
-    anssi: NT012(R03)
     cis-csc: 1,14,15,16,3,5,6
     cis@ubuntu2004: 2.2.1.4
     cis@ubuntu2204: 2.1.4.4

diff --git a/linux_os/guide/services/ntp/service_timesyncd_configured/rule.yml b/linux_os/guide/services/ntp/service_timesyncd_configured/rule.yml
@@ -26,7 +26,6 @@ identifiers:
     cce@sle15: CCE-92538-8 
 
 references:
-    anssi: BP28(R43)
     cis@sle12: 2.2.1.2
     cis@sle15: 2.2.1.2
     disa:  CCI-001891

diff --git a/linux_os/guide/services/ntp/service_timesyncd_enabled/rule.yml b/linux_os/guide/services/ntp/service_timesyncd_enabled/rule.yml
@@ -26,7 +26,6 @@ identifiers:
     cce@sle15: CCE-91296-4
 
 references:
-    anssi: NT012(R03)
     cis-csc: 1,14,15,16,3,5,6
     cis@sle12: 2.2.1.2
     cis@sle15: 2.2.1.2

diff --git a/linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/rule.yml b/linux_os/guide/services/ntp/service_timesyncd_root_distance_configured/rule.yml
@@ -21,7 +21,6 @@ identifiers:
     cce@sle15: CCE-92514-9
 
 references:
-    anssi: BP28(R43)
     cis@sle12: 2.2.1.2
     cis@sle15: 2.2.1.2
     disa:  CCI-001891

diff --git a/linux_os/guide/services/obsolete/inetd_and_xinetd/package_tcp_wrappers_removed/rule.yml b/linux_os/guide/services/obsolete/inetd_and_xinetd/package_tcp_wrappers_removed/rule.yml
@@ -24,7 +24,6 @@ identifiers:
     cce@sle15: CCE-92476-1
 
 references:
-    anssi: BP28(R1)
     cis-csc: 11,12,14,15,3,8,9
     cis@sle12: 2.1.1
     cis@sle15: 2.1.1

diff --git a/linux_os/guide/services/obsolete/inetd_and_xinetd/package_xinetd_removed/rule.yml b/linux_os/guide/services/obsolete/inetd_and_xinetd/package_xinetd_removed/rule.yml
@@ -20,7 +20,6 @@ identifiers:
     cce@sle15: CCE-91436-6
 
 references:
-    anssi: BP28(R1)
     cis-csc: 11,12,14,15,3,8,9
     cis@sle12: 2.1.1
     cis@sle15: 2.1.1

diff --git a/linux_os/guide/services/obsolete/nis/package_ypbind_removed/rule.yml b/linux_os/guide/services/obsolete/nis/package_ypbind_removed/rule.yml
@@ -26,7 +26,6 @@ identifiers:
     cce@sle15: CCE-91159-4
 
 references:
-    anssi: BP28(R1)
     cis@sle12: 2.3.1
     cis@sle15: 2.3.1
     hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)

diff --git a/linux_os/guide/services/obsolete/nis/package_ypserv_removed/rule.yml b/linux_os/guide/services/obsolete/nis/package_ypserv_removed/rule.yml
@@ -24,7 +24,6 @@ identifiers:
     cce@sle15: CCE-91160-2
 
 references:
-    anssi: BP28(R1)
     cis-csc: 11,12,14,15,3,8,9
     cis@sle12: 2.2.18
     cis@sle15: 2.2.18

diff --git a/linux_os/guide/services/obsolete/r_services/package_rsh-server_removed/rule.yml b/linux_os/guide/services/obsolete/r_services/package_rsh-server_removed/rule.yml
@@ -24,7 +24,6 @@ identifiers:
     cce@sle15: CCE-91425-9
 
 references:
-    anssi: BP28(R1)
     cis-csc: 11,12,14,15,3,8,9
     cobit5: APO13.01,BAI10.01,BAI10.02,BAI10.03,BAI10.05,DSS01.04,DSS05.02,DSS05.03,DSS05.05,DSS06.06
     disa: CCI-000381

diff --git a/linux_os/guide/services/obsolete/r_services/package_rsh_removed/rule.yml b/linux_os/guide/services/obsolete/r_services/package_rsh_removed/rule.yml
@@ -33,7 +33,6 @@ identifiers:
     cce@sle15: CCE-85760-7
 
 references:
-    anssi: BP28(R1)
     cis@sle12: 2.3.2
     cis@sle15: 2.3.2
     cis@ubuntu2004: 2.3.2

diff --git a/linux_os/guide/services/obsolete/talk/package_talk-server_removed/rule.yml b/linux_os/guide/services/obsolete/talk/package_talk-server_removed/rule.yml
@@ -20,7 +20,6 @@ identifiers:
     cce@sle15: CCE-91433-3
 
 references:
-    anssi: BP28(R1)
     hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)
     pcidss4: '2.2.4'
 

diff --git a/linux_os/guide/services/obsolete/talk/package_talk_removed/rule.yml b/linux_os/guide/services/obsolete/talk/package_talk_removed/rule.yml
@@ -25,7 +25,6 @@ identifiers:
     cce@sle15: CCE-91432-5
 
 references:
-    anssi: BP28(R1)
     cis@sle12: 2.3.3
     cis@sle15: 2.3.3
     cis@ubuntu2004: 2.3.3

diff --git a/linux_os/guide/services/obsolete/telnet/package_telnet-server_removed/rule.yml b/linux_os/guide/services/obsolete/telnet/package_telnet-server_removed/rule.yml
@@ -31,7 +31,6 @@ identifiers:
     cce@sle15: CCE-83273-3
 
 references:
-    anssi: BP28(R1)
     ccn@rhel9: A.8.SEC-RHEL4
     cis-csc: 11,12,14,15,3,8,9
     cis@sle12: 2.2.19

diff --git a/linux_os/guide/services/obsolete/telnet/package_telnet_removed/rule.yml b/linux_os/guide/services/obsolete/telnet/package_telnet_removed/rule.yml
@@ -23,7 +23,6 @@ identifiers:
     cce@sle15: CCE-91434-1
 
 references:
-    anssi: BP28(R1)
     cis@sle12: 2.3.4
     cis@sle15: 2.3.4
     cis@ubuntu2004: 2.3.4

diff --git a/linux_os/guide/services/obsolete/tftp/package_tftp-server_removed/rule.yml b/linux_os/guide/services/obsolete/tftp/package_tftp-server_removed/rule.yml
@@ -24,7 +24,6 @@ identifiers:
     cce@sle15: CCE-91227-9
 
 references:
-    anssi: BP28(R1)
     ccn@rhel9: A.8.SEC-RHEL4
     cis-csc: 11,12,14,15,3,8,9
     cobit5: APO13.01,BAI10.01,BAI10.02,BAI10.03,BAI10.05,DSS01.04,DSS05.02,DSS05.03,DSS05.05,DSS06.06

diff --git a/linux_os/guide/services/obsolete/tftp/package_tftp_removed/rule.yml b/linux_os/guide/services/obsolete/tftp/package_tftp_removed/rule.yml
@@ -24,7 +24,6 @@ identifiers:
     cce@sle15: CCE-91158-6
 
 references:
-    anssi: BP28(R1)
     pcidss4: '2.2.4'
 
 ocil: '{{{ describe_package_remove(package="tftp") }}}'

diff --git a/linux_os/guide/services/ssh/file_permissions_sshd_private_key/rule.yml b/linux_os/guide/services/ssh/file_permissions_sshd_private_key/rule.yml
@@ -34,7 +34,6 @@ identifiers:
     cce@sle15: CCE-85644-3
 
 references:
-    anssi: BP28(R36)
     cis-csc: 12,13,14,15,16,18,3,5
     cis@sle12: 5.2.2
     cis@sle15: 5.2.2

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_allow_only_protocol2/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_allow_only_protocol2/rule.yml
@@ -24,7 +24,6 @@ identifiers:
     cce@sle15: CCE-91440-8
 
 references:
-    anssi: NT007(R1)
     cis-csc: 1,12,15,16,5,8
     cis@sle12: 5.3.4
     cjis: 5.5.6

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_disable_empty_passwords/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_disable_empty_passwords/rule.yml
@@ -30,7 +30,6 @@ identifiers:
     cce@sle15: CCE-85667-4
 
 references:
-    anssi: NT007(R17)
     cis-csc: 11,12,13,14,15,16,18,3,5,9
     cis@sle12: 5.2.11
     cis@sle15: 5.2.11

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_disable_root_login/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_disable_root_login/rule.yml
@@ -27,7 +27,6 @@ identifiers:
     cce@sle15: CCE-85557-7
 
 references:
-    anssi: BP28(R19),NT007(R21)
     cis-csc: 1,11,12,13,14,15,16,18,3,5
     cis@sle12: 5.2.10
     cis@sle15: 5.2.10

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/rule.yml
@@ -38,7 +38,6 @@ identifiers:
     cce@sle15: CCE-83281-6
 
 references:
-    anssi: BP28(R29)
     ccn@rhel9: A.5.SEC-RHEL7
     cis-csc: 1,12,13,14,15,16,18,3,5,7,8
     cis@sle12: 5.2.16

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml
@@ -32,7 +32,6 @@ identifiers:
     cce@sle15: CCE-91228-7
 
 references:
-    anssi: BP28(R32)
     ccn@rhel9: A.5.SEC-RHEL7
     cis-csc: 1,12,13,14,15,16,18,3,5,7,8
     cis@sle12: 5.2.16

diff --git a/linux_os/guide/system/accounts/accounts-pam/enable_pam_namespace/rule.yml b/linux_os/guide/system/accounts/accounts-pam/enable_pam_namespace/rule.yml
@@ -23,8 +23,6 @@ identifiers:
   cce@sle12: CCE-91505-8
   cce@sle15: CCE-91196-6
 
-references:
-  anssi: BP28(R39)
 
 ocil_clause: |-
     pam_namespace.so is not required or is commented out

diff --git a/...s/accounts-pam/locking_out_password_attempts/accounts_password_pam_unix_remember/rule.yml b/...s/accounts-pam/locking_out_password_attempts/accounts_password_pam_unix_remember/rule.yml
@@ -27,7 +27,6 @@ identifiers:
     cce@sle15: CCE-85678-1
 
 references:
-    anssi: BP28(R18)
     cis-csc: 1,12,15,16,5
     cis@ubuntu2204: 5.4.3
     cjis: 5.6.2.1.1

diff --git a/.../accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml b/.../accounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny/rule.yml
@@ -39,7 +39,6 @@ identifiers:
     cce@sle15: CCE-85842-3
 
 references:
-    anssi: BP28(R18)
     ccn@rhel9: A.30.SEC-RHEL1
     cis-csc: 1,12,15,16
     cis@ubuntu2204: 5.4.2

diff --git a/...unts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny_root/rule.yml b/...unts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_deny_root/rule.yml
@@ -27,7 +27,6 @@ identifiers:
     cce@sle15: CCE-91171-9
 
 references:
-    anssi: BP28(R18)
     cis-csc: 1,12,15,16
     cobit5: DSS05.04,DSS05.10,DSS06.10
     disa: CCI-002238,CCI-000044

diff --git a/...ounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/rule.yml b/...ounts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_interval/rule.yml
@@ -37,7 +37,6 @@ identifiers:
     cce@sle15: CCE-91169-3
 
 references:
-    anssi: BP28(R18)
     cis-csc: 1,12,15,16
     cis@ubuntu2204: 5.4.2
     cobit5: DSS05.04,DSS05.10,DSS06.10

diff --git a/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/rule.yml b/...ts-pam/locking_out_password_attempts/accounts_passwords_pam_faillock_unlock_time/rule.yml
@@ -41,7 +41,6 @@ identifiers:
     cce@sle15: CCE-85841-5
 
 references:
-    anssi: BP28(R18)
     ccn@rhel9: A.30.SEC-RHEL1
     cis-csc: 1,12,15,16
     cis@ubuntu2204: 5.4.2

diff --git a/...ccounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2/rule.yml b/...ccounts/accounts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2/rule.yml
@@ -40,7 +40,6 @@ identifiers:
     cce@sle15: CCE-85554-4
 
 references:
-    anssi: BP28(R18)
     cis@sle12: 5.3.2
     cis@sle15: 5.3.2
     cis@ubuntu2004: 5.3.2

diff --git a/...counts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2_deny_root/rule.yml b/...counts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2_deny_root/rule.yml
@@ -19,7 +19,6 @@ identifiers:
     cce@sle15: CCE-91281-6
 
 references:
-    anssi: BP28(R18)
     cis-csc: 1,12,15,16
     cis@sle12: 5.3.2
     cis@sle15: 5.3.2

diff --git a/...unts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2_unlock_time/rule.yml b/...unts-pam/locking_out_password_attempts/accounts_passwords_pam_tally2_unlock_time/rule.yml
@@ -19,7 +19,6 @@ identifiers:
     cce@sle15: CCE-91282-4
 
 references:
-    anssi: BP28(R18)
     cis-csc: 1,12,15,16
     cis@sle12: 5.3.2
     cis@sle15: 5.3.2 

diff --git a/...word_quality/password_quality_pamcracklib/cracklib_accounts_password_pam_dcredit/rule.yml b/...word_quality/password_quality_pamcracklib/cracklib_accounts_password_pam_dcredit/rule.yml
@@ -22,7 +22,6 @@ identifiers:
     cce@sle15: CCE-85564-3
 
 references:
-    anssi: BP28(R18)
     cis@sle12: 5.3.1
     cis@sle15: 5.3.1
     disa: CCI-000194