Install the SSSD Package

An XCCDF Rule

Description

The sssd package should be installed. The sssd package can be installed with the following command:

$ sudo yum install sssd

ID: xccdf_org.ssgproject.content_rule_package_sssd_installed
Severity: Medium
References: 1 12 15 16 5

DSS05.04 DSS05.05 DSS05.07 DSS05.10 DSS06.03 DSS06.10

4.3.3.2.2 4.3.3.5.1 4.3.3.5.2 4.3.3.6.1 4.3.3.6.2 4.3.3.6.3 4.3.3.6.4 4.3.3.6.5 4.3.3.6.6 4.3.3.6.7 4.3.3.6.8 4.3.3.6.9 4.3.3.7.2 4.3.3.7.4

SR 1.1 SR 1.10 SR 1.2 SR 1.3 SR 1.4 SR 1.5 SR 1.7 SR 1.8 SR 1.9 SR 2.1

A.18.1.4 A.7.1.1 A.9.2.1 A.9.2.2 A.9.2.3 A.9.2.4 A.9.2.6 A.9.3.1 A.9.4.2 A.9.4.3

CM-6(a)

PR.AC-1 PR.AC-6 PR.AC-7

CCE-82444-1
Updated: about 1 year ago


package --add=sssd


[[packages]]
name = "sssd"
version = "*"

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - CCE-82444-1
  - NIST-800-53-CM-6(a)  - enable_strategy
  - low_complexity
  - low_disruption
  - medium_severity
  - no_reboot_needed
  - package_sssd_installed

- name: Ensure sssd is installed
  package:
    name: sssd
    state: present
  when: '"sssd-common" in ansible_facts.packages'
  tags:
  - CCE-82444-1
  - NIST-800-53-CM-6(a)
  - enable_strategy
  - low_complexity
  - low_disruption
  - medium_severity
  - no_reboot_needed
  - package_sssd_installed

include install_sssd

class install_sssd {
  package { 'sssd':
    ensure => 'installed',
  }}

# Remediation is applicable only in certain platforms
if rpm --quiet -q sssd-common; then

if ! rpm -q --quiet "sssd" ; then
    yum install -y "sssd"
fi
else
    >&2 echo 'Remediation is not applicable, nothing was done'
fi

Install the SSSD Package

Description

Remediation - Anaconda Pre-Install Instructions

Remediation - OS Build Blueprint

Remediation - Ansible

Remediation - Puppet

Remediation - Shell Script