diff --git a/doc/metadata/rhel7/RHEL-07-010072.rst b/doc/metadata/rhel7/RHEL-07-010072.rst index e76be1fb..09860367 100644 --- a/doc/metadata/rhel7/RHEL-07-010072.rst +++ b/doc/metadata/rhel7/RHEL-07-010072.rst @@ -1,7 +1,7 @@ --- id: RHEL-07-010072 -status: not implemented -tag: misc +status: implemented +tag: packages --- -This STIG requirement is not yet implemented. +The role will ensure that the ``screen`` package is installed. diff --git a/doc/metadata/rhel7/RHEL-07-040260.rst b/doc/metadata/rhel7/RHEL-07-040260.rst index a9a30807..68f689a1 100644 --- a/doc/metadata/rhel7/RHEL-07-040260.rst +++ b/doc/metadata/rhel7/RHEL-07-040260.rst @@ -1,7 +1,11 @@ --- id: RHEL-07-040260 -status: not implemented -tag: misc +status: implemented +tag: packages --- -This STIG requirement is not yet implemented. +The STIG requires that every system has an ssh client and server installed. The +role installs the following packages: + +* CentOS: ``openssh-clients``, ``openssh-server`` +* Ubuntu: ``openssh-client``, ``openssh-server`` diff --git a/tasks/rhel7stig/packages.yml b/tasks/rhel7stig/packages.yml index c5638b60..32710a8b 100644 --- a/tasks/rhel7stig/packages.yml +++ b/tasks/rhel7stig/packages.yml @@ -31,9 +31,11 @@ - auth - packages - services + - RHEL-07-010072 - RHEL-07-021910 - RHEL-07-020000 - RHEL-08-020010 + - RHEL-07-040260 - RHEL-07-040500 - RHEL-07-040560 @@ -55,8 +57,10 @@ - auth - packages - services + - RHEL-07-010072 - RHEL-07-021910 - RHEL-07-020000 - RHEL-08-020010 + - RHEL-07-040260 - RHEL-07-040500 - RHEL-07-040560 diff --git a/vars/redhat.yml b/vars/redhat.yml index 946b382c..db9d557e 100644 --- a/vars/redhat.yml +++ b/vars/redhat.yml @@ -86,6 +86,12 @@ stig_packages: # RHEL 7 STIG: Packages to add/remove stig_packages_rhel7: + - packages: + - openssh-client + - openssh-server + - screen + state: "{{ security_package_state }}" + enabled: True - packages: - rsh-server state: absent diff --git a/vars/ubuntu.yml b/vars/ubuntu.yml index decf8baf..72e21776 100644 --- a/vars/ubuntu.yml +++ b/vars/ubuntu.yml @@ -90,6 +90,12 @@ stig_packages: # RHEL 7 STIG: Packages to add/remove stig_packages_rhel7: + - packages: + - openssh-clients + - openssh-server + - screen + state: "{{ security_package_state }}" + enabled: True - packages: - rsh-server state: absent