ComplianceAsCode · teacup-on-rockingchair · Sep 12, 2025 · Jul 31, 2025 · Aug 4, 2025 · Aug 25, 2025
diff --git a/controls/general_sle15.yml b/controls/general_sle15.yml
diff --git a/...s/guide/auditing/auditd_configure_rules/audit_rules_suid_auid_privilege_function/rule.yml b/...s/guide/auditing/auditd_configure_rules/audit_rules_suid_auid_privilege_function/rule.yml
@@ -38,6 +38,7 @@ identifiers:
     cce@rhel8: CCE-90209-8
     cce@rhel9: CCE-86368-8
     cce@rhel10: CCE-86599-8
+    cce@sle15: CCE-92488-6
 
 warnings:
     - general: |-

diff --git a/linux_os/guide/auditing/auditd_configure_rules/directory_permissions_var_log_audit/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/directory_permissions_var_log_audit/rule.yml
@@ -31,6 +31,7 @@ identifiers:
     cce@rhel8: CCE-84048-8
     cce@rhel9: CCE-83734-4
     cce@rhel10: CCE-86750-7
+    cce@sle15: CCE-92530-5
 
 references:
     cis-csc: 1,11,12,13,14,15,16,18,19,3,4,5,6,7,8

diff --git a/linux_os/guide/auditing/auditd_configure_rules/file_group_ownership_var_log_audit/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/file_group_ownership_var_log_audit/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel8: CCE-88227-4
     cce@rhel9: CCE-89603-5
     cce@rhel10: CCE-89126-7
+    cce@sle15: CCE-92534-7
 
 references:
     cis-csc: 1,11,12,13,14,15,16,18,19,3,4,5,6,7,8

diff --git a/...os/guide/auditing/auditd_configure_rules/file_groupownership_audit_configuration/rule.yml b/...os/guide/auditing/auditd_configure_rules/file_groupownership_audit_configuration/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-86405-8
     cce@rhel9: CCE-86446-2
     cce@rhel10: CCE-88238-1
+    cce@sle15: CCE-92544-6
 
 references:
     srg: SRG-OS-000063-GPOS-00032

diff --git a/linux_os/guide/auditing/auditd_configure_rules/file_ownership_audit_configuration/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/file_ownership_audit_configuration/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-86406-6
     cce@rhel9: CCE-86445-4
     cce@rhel10: CCE-88877-6
+    cce@sle15: CCE-92550-3
 
 references:
     srg: SRG-OS-000063-GPOS-00032

diff --git a/linux_os/guide/auditing/auditd_configure_rules/file_ownership_var_log_audit_stig/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/file_ownership_var_log_audit_stig/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-88228-2
     cce@rhel9: CCE-89952-6
     cce@rhel10: CCE-89939-3
+    cce@sle15: CCE-92553-7
 
 references:
     cis-csc: 1,11,12,13,14,15,16,18,19,3,4,5,6,7,8

diff --git a/linux_os/guide/auditing/auditd_configure_rules/file_permissions_audit_configuration/rule.yml b/linux_os/guide/auditing/auditd_configure_rules/file_permissions_audit_configuration/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-86407-4
     cce@rhel9: CCE-88002-1
     cce@rhel10: CCE-88067-4
+    cce@sle15: CCE-92557-8
 
 references:
     nist: AU-12 b

diff --git a/linux_os/guide/auditing/file_permissions_auditd/file_groupownership_audit_binaries/rule.yml b/linux_os/guide/auditing/file_permissions_auditd/file_groupownership_audit_binaries/rule.yml
@@ -34,6 +34,7 @@ identifiers:
     cce@rhel8: CCE-86455-3
     cce@rhel9: CCE-86457-9
     cce@rhel10: CCE-87965-0
+    cce@sle15: CCE-92543-8
 
 references:
     srg: SRG-OS-000256-GPOS-00097,SRG-OS-000257-GPOS-00098

diff --git a/linux_os/guide/auditing/file_permissions_auditd/file_ownership_audit_binaries/rule.yml b/linux_os/guide/auditing/file_permissions_auditd/file_ownership_audit_binaries/rule.yml
@@ -34,6 +34,7 @@ identifiers:
     cce@rhel8: CCE-86453-8
     cce@rhel9: CCE-86454-6
     cce@rhel10: CCE-89400-6
+    cce@sle15: CCE-92549-5
 
 references:
     srg: SRG-OS-000256-GPOS-00097,SRG-OS-000257-GPOS-00098

diff --git a/linux_os/guide/auditing/file_permissions_auditd/file_permissions_audit_binaries/rule.yml b/linux_os/guide/auditing/file_permissions_auditd/file_permissions_audit_binaries/rule.yml
@@ -34,6 +34,7 @@ identifiers:
     cce@rhel8: CCE-86447-0
     cce@rhel9: CCE-86448-8
     cce@rhel10: CCE-86166-6
+    cce@sle15: CCE-92555-2
 
 references:
     srg: SRG-OS-000256-GPOS-00097,SRG-OS-000257-GPOS-00098

diff --git a/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_cron_allow_exists/rule.yml b/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_cron_allow_exists/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-86184-9
     cce@rhel9: CCE-86185-6
     cce@rhel10: CCE-87235-8
+    cce@sle15: CCE-92533-9
 
 ocil_clause: 'the file /etc/cron.allow does not exist'
 

diff --git a/linux_os/guide/services/dns/package_dnsmasq_removed/rule.yml b/linux_os/guide/services/dns/package_dnsmasq_removed/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-90746-9
     cce@rhel9: CCE-86063-5
     cce@rhel10: CCE-86558-4
+    cce@sle15: CCE-92596-6
 
 {{{ complete_ocil_entry_package(package="dnsmasq") }}}
 

diff --git a/linux_os/guide/services/dns/service_dnsmasq_disabled/rule.yml b/linux_os/guide/services/dns/service_dnsmasq_disabled/rule.yml
@@ -12,6 +12,9 @@ rationale: |-
 
 severity: medium
 
+identifiers:
+    cce@sle15: CCE-92602-2
+
 platform: system_with_kernel
 
 template:

diff --git a/linux_os/guide/services/ftp/package_ftp_removed/rule.yml b/linux_os/guide/services/ftp/package_ftp_removed/rule.yml
@@ -1,7 +1,6 @@
 documentation_complete: true
 
 
-
 title: 'Remove ftp Package'
 
 description: |-
@@ -23,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-90745-1
     cce@rhel9: CCE-86075-9
     cce@rhel10: CCE-86687-1
+    cce@sle15: CCE-92597-4
 
 ocil: '{{{ describe_package_remove(package="ftp") }}}'
 

diff --git a/linux_os/guide/services/imap/disabling_cyrus-imapd/package_cyrus-imapd_removed/rule.yml b/linux_os/guide/services/imap/disabling_cyrus-imapd/package_cyrus-imapd_removed/rule.yml
@@ -15,6 +15,7 @@ identifiers:
     cce@rhel8: CCE-88119-3
     cce@rhel9: CCE-88120-1
     cce@rhel10: CCE-90156-1
+    cce@sle15: CCE-92595-8
 
 {{{ complete_ocil_entry_package(package="cyrus-imapd") }}}
 

diff --git a/linux_os/guide/services/ldap/openldap_server/service_slapd_disabled/rule.yml b/linux_os/guide/services/ldap/openldap_server/service_slapd_disabled/rule.yml
@@ -15,6 +15,7 @@ severity: medium
 identifiers:
     cce@rhel8: CCE-87262-2
     cce@rhel9: CCE-87263-0
+    cce@sle15: CCE-92603-0
 
 ocil_clause: |-
     {{{ ocil_clause_service_disabled(service="slapd") }}}

diff --git a/linux_os/guide/services/ntp/service_chronyd_enabled/rule.yml b/linux_os/guide/services/ntp/service_chronyd_enabled/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel8: CCE-82875-6
     cce@rhel9: CCE-84217-9
     cce@rhel10: CCE-90511-7
+    cce@sle15: CCE-92601-4
 
 references:
     ism: 0988,1405

diff --git a/linux_os/guide/services/obsolete/tftp/service_tftp_disabled/rule.yml b/linux_os/guide/services/obsolete/tftp/service_tftp_disabled/rule.yml
@@ -22,6 +22,7 @@ severity: high
 
 identifiers:
     cce@rhel8: CCE-82435-9
+    cce@sle15: CCE-92606-3
 
 references:
     cis-csc: 11,12,14,15,3,8,9

diff --git a/...s-pam/set_password_hashing_algorithm/set_password_hashing_algorithm_passwordauth/rule.yml b/...s-pam/set_password_hashing_algorithm/set_password_hashing_algorithm_passwordauth/rule.yml
@@ -33,6 +33,7 @@ identifiers:
     cce@rhel8: CCE-85945-4
     cce@rhel9: CCE-85946-2
     cce@rhel10: CCE-88661-4
+    cce@sle15: CCE-92607-1
 
 references:
     cis-csc: 1,12,15,16,5

diff --git a/linux_os/guide/system/accounts/accounts-restrictions/no_nologin_in_shells/rule.yml b/linux_os/guide/system/accounts/accounts-restrictions/no_nologin_in_shells/rule.yml
@@ -16,6 +16,9 @@ rationale: |-
 
 severity: medium
 
+identifiers:
+    cce@sle15: CCE-92592-5
+
 ocil_clause: 'nologin is listed in /etc/shells'
 
 ocil: |-

diff --git a/...ystem/accounts/accounts-restrictions/root_logins/ensure_root_password_configured/rule.yml b/...ystem/accounts/accounts-restrictions/root_logins/ensure_root_password_configured/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel8: CCE-86517-0
     cce@rhel9: CCE-87101-2
     cce@rhel10: CCE-89334-7
+    cce@sle15: CCE-92532-1
 
 platform: system_with_kernel
 

diff --git a/...system/accounts/accounts-restrictions/root_logins/groups_no_zero_gid_except_root/rule.yml b/...system/accounts/accounts-restrictions/root_logins/groups_no_zero_gid_except_root/rule.yml
@@ -14,6 +14,9 @@ rationale: |-
 
 severity: high
 
+identifiers:
+    cce@sle15: CCE-92565-1
+
 ocil_clause: 'any groups other than "root" have a GID of "0"'
 
 ocil: |-

diff --git a/...em/accounts/accounts-restrictions/root_logins/no_invalid_shell_accounts_unlocked/rule.yml b/...em/accounts/accounts-restrictions/root_logins/no_invalid_shell_accounts_unlocked/rule.yml
@@ -14,6 +14,9 @@ rationale: |-
 
 severity: medium
 
+identifiers:
+    cce@sle15: CCE-92591-7
+
 warnings:
     - general: |-
         Automatic remediation of this control is not recommended. Locking system accounts

diff --git a/...m/accounts/accounts-restrictions/root_logins/no_password_auth_for_systemaccounts/rule.yml b/...m/accounts/accounts-restrictions/root_logins/no_password_auth_for_systemaccounts/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-86112-0
     cce@rhel9: CCE-86113-8
     cce@rhel10: CCE-90273-4
+    cce@sle15: CCE-92593-3
 
 references:
     nerc-cip: CIP-003-8 R5.1.1,CIP-003-8 R5.3,CIP-004-6 R2.3,CIP-007-3 R2.1,CIP-007-3 R2.2,CIP-007-3 R2.3,CIP-007-3 R5.1,CIP-007-3 R5.1.1,CIP-007-3 R5.1.2

diff --git a/linux_os/guide/system/accounts/accounts-session/file_permission_user_bash_history/rule.yml b/linux_os/guide/system/accounts/accounts-session/file_permission_user_bash_history/rule.yml
@@ -13,6 +13,9 @@ rationale: |-
 
 severity: medium
 
+identifiers:
+    cce@sle15: CCE-92554-5
+
 ocil_clause: 'file is not 0600 or more permissive'
 
 ocil: |-

diff --git a/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_root/rule.yml b/linux_os/guide/system/accounts/accounts-session/user_umask/accounts_umask_root/rule.yml
@@ -15,4 +15,7 @@ rationale: |-
 
 severity: medium
 
+identifiers:
+    cce@sle15: CCE-92484-5
+
 platform: package[bash]
diff --git a/linux_os/guide/system/apparmor/package_apparmor_installed/rule.yml b/linux_os/guide/system/apparmor/package_apparmor_installed/rule.yml
@@ -11,6 +11,9 @@ rationale: |-
 
 severity: medium
 
+identifiers:
+    cce@sle15: CCE-92594-1
+
 references:
     srg: SRG-OS-000368-GPOS-00154,SRG-OS-000312-GPOS-00122,SRG-OS-000312-GPOS-00123,SRG-OS-000312-GPOS-00124,SRG-OS-000324-GPOS-00125,SRG-OS-000370-GPOS-00155
 

diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_seccomp/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_seccomp/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel8: CCE-86450-4
     cce@rhel9: CCE-86451-2
     cce@rhel10: CCE-87403-2
+    cce@sle15: CCE-92567-7
 
 ocil_clause: 'the kernel was not built with the required value'
 

diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_seccomp_filter/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_seccomp_filter/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: CCE-86490-0
     cce@rhel9: CCE-86491-8
     cce@rhel10: CCE-89407-1
+    cce@sle15: CCE-92568-5
 
 ocil_clause: 'the kernel was not built with the required value'
 

diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_security/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_security/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-86572-5
     cce@rhel9: CCE-86573-3
     cce@rhel10: CCE-87679-7
+    cce@sle15: CCE-92570-1
 
 ocil_clause: 'the kernel was not built with the required value'
 

diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_security_writable_hooks/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_security_writable_hooks/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: CCE-86884-4
     cce@rhel9: CCE-86885-1
     cce@rhel10: CCE-89825-4
+    cce@sle15: CCE-92571-9
 
 ocil_clause: 'the kernel was not built with the required value'
 

diff --git a/linux_os/guide/system/kernel_build_config/kernel_config_security_yama/rule.yml b/linux_os/guide/system/kernel_build_config/kernel_config_security_yama/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-86716-8
     cce@rhel9: CCE-86717-6
     cce@rhel10: CCE-87793-6
+    cce@sle15: CCE-92572-7
 
 ocil_clause: 'the kernel was not built with the required value'
 

diff --git a/linux_os/guide/system/logging/journald/journald_disable_forward_to_syslog/rule.yml b/linux_os/guide/system/logging/journald/journald_disable_forward_to_syslog/rule.yml
@@ -17,6 +17,9 @@ platform: package[systemd]
 
 severity: medium
 
+identifiers:
+    cce@sle15: CCE-92566-9
+
 {{%- if product in ["rhel8", "rhel9", "sle15"] %}}
 template:
     name: systemd_dropin_configuration

diff --git a/linux_os/guide/system/logging/journald/package_systemd-journal-remote_installed/rule.yml b/linux_os/guide/system/logging/journald/package_systemd-journal-remote_installed/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-86467-8
     cce@rhel9: CCE-86760-6
     cce@rhel10: CCE-89465-9
+    cce@sle15: CCE-92598-2
     cce@slmicro5: CCE-94085-8
     cce@slmicro6: CCE-94738-2
 

diff --git a/linux_os/guide/system/logging/journald/service_systemd-journal-upload_enabled/rule.yml b/linux_os/guide/system/logging/journald/service_systemd-journal-upload_enabled/rule.yml
@@ -14,6 +14,7 @@ rationale: |-
 severity: medium
 
 identifiers:
+    cce@sle15: CCE-92604-8
     cce@slmicro5: CCE-94084-1
     cce@slmicro6: CCE-94735-8
 

diff --git a/linux_os/guide/system/logging/journald/service_systemd-journald_enabled/rule.yml b/linux_os/guide/system/logging/journald/service_systemd-journald_enabled/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-85921-5
     cce@rhel9: CCE-85941-3
     cce@rhel10: CCE-89396-6
+    cce@sle15: CCE-92605-5
 
 references:
     nist: SC-24

diff --git a/linux_os/guide/system/logging/journald/socket_systemd-journal-remote_disabled/rule.yml b/linux_os/guide/system/logging/journald/socket_systemd-journal-remote_disabled/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: CCE-87605-2
     cce@rhel9: CCE-87606-0
     cce@rhel10: CCE-87754-8
+    cce@sle15: CCE-92608-9
 
 ocil_clause: 'the systemd-journal-remote socket is not masked'
 

diff --git a/linux_os/guide/system/logging/journald/systemd_journal_upload_server_tls/rule.yml b/linux_os/guide/system/logging/journald/systemd_journal_upload_server_tls/rule.yml
@@ -13,6 +13,7 @@ rationale: |-
 severity: medium
 
 identifiers:
+    cce@sle15: CCE-92612-1
     cce@slmicro5: CCE-94080-9
     cce@slmicro6: CCE-94737-4
 

diff --git a/linux_os/guide/system/logging/journald/systemd_journal_upload_url/rule.yml b/linux_os/guide/system/logging/journald/systemd_journal_upload_url/rule.yml
@@ -14,6 +14,7 @@ rationale: |-
 severity: medium
 
 identifiers:
+    cce@sle15: CCE-92613-9
     cce@slmicro5: CCE-94081-7
     cce@slmicro6: CCE-94736-6
 

diff --git a/linux_os/guide/system/logging/logging_services_active/rule.yml b/linux_os/guide/system/logging/logging_services_active/rule.yml
@@ -15,6 +15,9 @@ rationale: |-
 
 severity: medium
 
+identifiers:
+    cce@sle15: CCE-92582-6
+
 platform: machine
 
 warnings:

diff --git a/linux_os/guide/system/logging/rsyslog_filecreatemode/rule.yml b/linux_os/guide/system/logging/rsyslog_filecreatemode/rule.yml
@@ -16,6 +16,7 @@ severity: medium
 identifiers:
     cce@rhel8: CCE-88321-5
     cce@rhel9: CCE-88322-3
+    cce@sle15: CCE-92599-0
 
 ocil_clause: '$FileCreateMode is not set or is more permissive than 0640'
 

diff --git a/linux_os/guide/system/network/network-ipsec/directory_groupowner_etc_ipsecd/rule.yml b/linux_os/guide/system/network/network-ipsec/directory_groupowner_etc_ipsecd/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86438-9
     cce@rhel9: CCE-86439-7
     cce@rhel10: CCE-88800-8
+    cce@sle15: CCE-92499-3
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/ipsec.d", group="root") }}}'
 

diff --git a/linux_os/guide/system/network/network-ipsec/directory_owner_etc_ipsecd/rule.yml b/linux_os/guide/system/network/network-ipsec/directory_owner_etc_ipsecd/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86302-7
     cce@rhel9: CCE-86303-5
     cce@rhel10: CCE-87636-7
+    cce@sle15: CCE-92508-1
 
 ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/ipsec.d", owner="root") }}}'
 

diff --git a/linux_os/guide/system/network/network-ipsec/directory_permissions_etc_ipsecd/rule.yml b/linux_os/guide/system/network/network-ipsec/directory_permissions_etc_ipsecd/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86305-0
     cce@rhel9: CCE-86306-8
     cce@rhel10: CCE-88730-7
+    cce@sle15: CCE-92517-2
 
 ocil_clause: '{{{ ocil_clause_file_permissions(file="/etc/ipsec.d", perms="0700") }}}'
 

diff --git a/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_conf/rule.yml b/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_conf/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86386-0
     cce@rhel9: CCE-86387-8
     cce@rhel10: CCE-86941-2
+    cce@sle15: CCE-92535-4
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/ipsec.conf", group="root") }}}'
 

diff --git a/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_secrets/rule.yml b/linux_os/guide/system/network/network-ipsec/file_groupowner_etc_ipsec_secrets/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: CCE-86397-7
     cce@rhel9: CCE-86398-5
     cce@rhel10: CCE-89956-7
+    cce@sle15: CCE-92537-0
 
 ocil_clause: '{{{ ocil_clause_file_group_owner(file="/etc/ipsec.secrets", group="root") }}}'
 

diff --git a/...rk-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_arp_filter/rule.yml b/...rk-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_arp_filter/rule.yml
@@ -19,6 +19,7 @@ identifiers:
     cce@rhel8: CCE-88555-8
     cce@rhel9: CCE-89555-7
     cce@rhel10: CCE-89431-1
+    cce@sle15: CCE-92609-7
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="net.ipv4.conf.all.arp_filter", value=xccdf_value("sysctl_net_ipv4_conf_all_arp_filter_value")) }}}