diff --git a/fedora/templates/csv/packages_installed.csv b/fedora/templates/csv/packages_installed.csv index 4abfd533404e..7bbf4d93e5b2 100644 --- a/fedora/templates/csv/packages_installed.csv +++ b/fedora/templates/csv/packages_installed.csv @@ -9,6 +9,7 @@ libreswan ntp opensc openssh-server +pcsc-lite vsftpd postfix screen diff --git a/rhel8/profiles/hipaa.profile b/rhel8/profiles/hipaa.profile index 44a8a849bbd0..9008e96f2799 100644 --- a/rhel8/profiles/hipaa.profile +++ b/rhel8/profiles/hipaa.profile @@ -34,22 +34,17 @@ selections: - sshd_disable_root_login - libreswan_approved_tunnels - no_rsh_trust_files - - package_rsh_removed - package_rsh-server_removed - package_talk_removed - package_talk-server_removed - package_telnet_removed - package_telnet-server_removed - package_xinetd_removed - - package_ypbind_removed - - package_ypserv_removed - service_crond_enabled - service_rexec_disabled - service_rlogin_disabled - - service_rsh_disabled - service_telnet_disabled - service_xinetd_disabled - - service_ypbind_disabled - service_zebra_disabled - use_kerberos_security_all_exports - disable_host_auth diff --git a/rhel8/profiles/ospp.profile b/rhel8/profiles/ospp.profile index 7811f6908f01..0a1ec8a6a558 100644 --- a/rhel8/profiles/ospp.profile +++ b/rhel8/profiles/ospp.profile @@ -835,7 +835,6 @@ selections: - mount_option_dev_shm_noexec - mount_option_dev_shm_nosuid - package_abrt_removed - - package_sendmail_removed - var_system_crypto_policy=fips - configure_crypto_policy diff --git a/rhel8/profiles/pci-dss.profile b/rhel8/profiles/pci-dss.profile index a81849ac415c..3fef39b0eb8b 100644 --- a/rhel8/profiles/pci-dss.profile +++ b/rhel8/profiles/pci-dss.profile @@ -112,7 +112,13 @@ selections: - ensure_redhat_gpgkey_installed - ensure_gpgcheck_globally_activated - ensure_gpgcheck_never_disabled - - smartcard_auth + - package_opensc_installed + - var_smartcard_drivers=cac + - configure_opensc_nss_db + - configure_opensc_card_drivers + - force_opensc_card_drivers + - service_pcscd_enabled + - sssd_enable_smartcards - set_password_hashing_algorithm_systemauth - set_password_hashing_algorithm_logindefs - set_password_hashing_algorithm_libuserconf diff --git a/rhel8/templates/csv/packages_installed.csv b/rhel8/templates/csv/packages_installed.csv index e5c22d4bf33e..248bac87b744 100644 --- a/rhel8/templates/csv/packages_installed.csv +++ b/rhel8/templates/csv/packages_installed.csv @@ -9,6 +9,7 @@ libreswan ntp opensc openssh-server +pcsc-lite vsftpd postfix tmux