Assign SLE16 CCEs for alread enabled rules

teacup-on-rockingchair · teacup-on-rockingchair · commit 89a1acb16766 · 2025-11-23T17:47:41.000+02:00
diff --git a/linux_os/guide/auditing/grub2_audit_argument/rule.yml b/linux_os/guide/auditing/grub2_audit_argument/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel10: CCE-88376-9
     cce@sle12: CCE-91553-8
     cce@sle15: CCE-85832-4
+    cce@sle16: CCE-95706-8
     cce@slmicro5: CCE-93871-2
 
 references:
diff --git a/linux_os/guide/auditing/service_auditd_enabled/rule.yml b/linux_os/guide/auditing/service_auditd_enabled/rule.yml
@@ -30,6 +30,7 @@ identifiers:
     cce@rhel10: CCE-87955-1
     cce@sle12: CCE-83024-0
     cce@sle15: CCE-85581-7
+    cce@sle16: CCE-95716-7
     cce@slmicro5: CCE-93768-0
     cce@slmicro6: CCE-94631-9
 
diff --git a/linux_os/guide/system/accounts/accounts-pam/display_login_attempts/rule.yml b/linux_os/guide/system/accounts/accounts-pam/display_login_attempts/rule.yml
@@ -42,6 +42,7 @@ identifiers:
     cce@rhel10: CCE-88650-7
     cce@sle12: CCE-83149-5
     cce@sle15: CCE-85560-1
+    cce@sle16: CCE-95704-3
     cce@slmicro5: CCE-93730-0
     cce@slmicro6: CCE-95037-8
 
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/no_shelllogin_for_systemaccounts/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/no_shelllogin_for_systemaccounts/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@rhel10: CCE-87448-7
     cce@sle12: CCE-83232-9
     cce@sle15: CCE-85672-4
+    cce@sle16: CCE-95711-8
     cce@slmicro5: CCE-93732-6
     cce@slmicro6: CCE-95039-4 
 
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/root_logins/restrict_serial_port_logins/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/root_logins/restrict_serial_port_logins/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel9: CCE-83622-1
     cce@rhel10: CCE-89728-0
     cce@sle15: CCE-91429-1
+    cce@sle16: CCE-95713-4
 
 references:
     cis-csc: 12,13,14,15,16,18,3,5
diff --git a/linux_os/guide/system/bootloader-grub2/grub2_nosmep_argument_absent/rule.yml b/linux_os/guide/system/bootloader-grub2/grub2_nosmep_argument_absent/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-85989-2
     cce@rhel9: CCE-86089-0
     cce@rhel10: CCE-89827-0
+    cce@sle16: CCE-95707-6
 
 ocil_clause: 'the kernel is configured to disable SMEP'
 
diff --git a/linux_os/guide/system/bootloader-grub2/grub2_spectre_v2_argument/rule.yml b/linux_os/guide/system/bootloader-grub2/grub2_spectre_v2_argument/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel8: CCE-89345-3
     cce@rhel9: CCE-90345-0
     cce@rhel10: CCE-90401-1
+    cce@sle16: CCE-95707-6
 
 ocil_clause: 'spectre_v2 mitigation is not enforced'
 
diff --git a/linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_loghost/rule.yml b/linux_os/guide/system/logging/rsyslog_sending_messages/rsyslog_remote_loghost/rule.yml
@@ -50,6 +50,7 @@ identifiers:
     cce@rhel10: CCE-90372-4
     cce@sle12: CCE-83180-0
     cce@sle15: CCE-85552-8
+    cce@sle16: CCE-95714-2
 
 references:
     cis-csc: 1,13,14,15,16,2,3,5,6
diff --git a/linux_os/guide/system/permissions/files/file_permissions_ungroupowned/rule.yml b/linux_os/guide/system/permissions/files/file_permissions_ungroupowned/rule.yml
@@ -32,6 +32,7 @@ identifiers:
     cce@rhel10: CCE-88305-8
     cce@sle12: CCE-83073-7
     cce@sle15: CCE-85658-3
+    cce@sle16: CCE-95705-0
     cce@slmicro5: CCE-93799-5
     cce@slmicro6: CCE-95088-1 
 
diff --git a/linux_os/guide/system/permissions/files/no_files_unowned_by_user/rule.yml b/linux_os/guide/system/permissions/files/no_files_unowned_by_user/rule.yml
@@ -29,6 +29,7 @@ identifiers:
     cce@rhel10: CCE-89680-3
     cce@sle12: CCE-83072-9
     cce@sle15: CCE-85657-5
+    cce@sle16: CCE-95710-0
     cce@slmicro5: CCE-93798-7
     cce@slmicro6: CCE-95087-3 
 
diff --git a/linux_os/guide/system/permissions/restrictions/enable_nx/bios_enable_execution_restrictions/rule.yml b/linux_os/guide/system/permissions/restrictions/enable_nx/bios_enable_execution_restrictions/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel10: CCE-89763-7
     cce@sle12: CCE-91563-7
     cce@sle15: CCE-91254-3
+    cce@sle16: CCE-95703-5
     cce@slmicro5: CCE-93934-8
 
 references:
diff --git a/linux_os/guide/system/permissions/restrictions/enable_nx/install_PAE_kernel_on_x86-32/rule.yml b/linux_os/guide/system/permissions/restrictions/enable_nx/install_PAE_kernel_on_x86-32/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel8: CCE-83919-1
     cce@sle12: CCE-91564-5
     cce@sle15: CCE-91255-0
+    cce@sle16: CCE-95708-4
     cce@slmicro5: CCE-93933-0
 
 references:
diff --git a/linux_os/guide/system/selinux/package_libselinux_installed/rule.yml b/linux_os/guide/system/selinux/package_libselinux_installed/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel9: CCE-84069-4
     cce@rhel10: CCE-90410-2
     cce@sle15: CCE-92490-2
+    cce@sle16: CCE-95712-6
 
 ocil_clause: 'the package is not installed'
 
diff --git a/linux_os/guide/system/selinux/selinux-booleans/sebool_selinuxuser_execmod/rule.yml b/linux_os/guide/system/selinux/selinux-booleans/sebool_selinuxuser_execmod/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel9: CCE-84086-8
     cce@rhel10: CCE-86922-2
     cce@sle15: CCE-91423-4
+    cce@sle16: CCE-95715-9
 
 references:
     hipaa: 164.308(a)(1)(ii)(D),164.308(a)(3),164.308(a)(4),164.310(b),164.310(c),164.312(a),164.312(e)
diff --git a/linux_os/guide/system/software/integrity/certified-vendor/installed_OS_is_vendor_supported/rule.yml b/linux_os/guide/system/software/integrity/certified-vendor/installed_OS_is_vendor_supported/rule.yml
@@ -38,6 +38,7 @@ identifiers:
     cce@rhel10: CCE-89725-6
     cce@sle12: CCE-83001-8
     cce@sle15: CCE-83260-0
+    cce@sle16: CCE-95709-2
     cce@slmicro5: CCE-93601-3
     cce@slmicro6: CCE-95035-2
 
diff --git a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_build_database/rule.yml b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_build_database/rule.yml
@@ -52,6 +52,7 @@ identifiers:
     cce@rhel10: CCE-86942-0
     cce@sle12: CCE-91483-8
     cce@sle15: CCE-85787-0
+    cce@sle16: CCE-95701-9
     cce@slmicro5: CCE-93710-2
     cce@slmicro6: CCE-94713-5
 
diff --git a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_checking_systemd_timer/rule.yml
@@ -20,6 +20,7 @@ severity: medium
 identifiers:
     cce@sle12: CCE-92366-4
     cce@sle15: CCE-92516-4
+    cce@sle16: CCE-95702-7
     cce@slmicro5: CCE-93721-9
     cce@slmicro6: CCE-94714-3
 
diff --git a/shared/references/cce-sle16-avail.txt b/shared/references/cce-sle16-avail.txt
@@ -1,19 +1,3 @@
-CCE-95701-9
-CCE-95702-7
-CCE-95703-5
-CCE-95704-3
-CCE-95705-0
-CCE-95706-8
-CCE-95707-6
-CCE-95708-4
-CCE-95709-2
-CCE-95710-0
-CCE-95711-8
-CCE-95712-6
-CCE-95713-4
-CCE-95714-2
-CCE-95715-9
-CCE-95716-7
 CCE-95717-5
 CCE-95718-3
 CCE-95719-1
