ComplianceAsCode · svet-se · Jun 2, 2025 · Jun 2, 2025 · Jun 2, 2025 · Jun 3, 2025
diff --git a/CMakeLists.txt b/CMakeLists.txt
@@ -118,6 +118,7 @@ option(SSG_PRODUCT_RHV4 "If enabled, the RHV4 SCAP content will be built" ${SSG_
 option(SSG_PRODUCT_SLE12 "If enabled, the SLE12 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_SLE15 "If enabled, the SLE15 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_SLMICRO5 "If enabled, the SLE Micro 5 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
+option(SSG_PRODUCT_SLMICRO6 "If enabled, the SLE Micro 6 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_TENCENTOS4 "If enabled, the TencentOS Server 4 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_UBUNTU2204 "If enabled, the Ubuntu 22.04 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_UBUNTU2404 "If enabled, the Ubuntu 24.04 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
@@ -358,6 +359,7 @@ message(STATUS "RHV 4: ${SSG_PRODUCT_RHV4}")
 message(STATUS "SUSE 12: ${SSG_PRODUCT_SLE12}")
 message(STATUS "SUSE 15: ${SSG_PRODUCT_SLE15}")
 message(STATUS "SLE Micro 5: ${SSG_PRODUCT_SLMICRO5}")
+message(STATUS "SLE Micro 6: ${SSG_PRODUCT_SLMICRO6}")
 message(STATUS "TencentOS Server 4: ${SSG_PRODUCT_TENCENTOS4}")
 message(STATUS "Ubuntu 22.04: ${SSG_PRODUCT_UBUNTU2204}")
 message(STATUS "Ubuntu 24.04: ${SSG_PRODUCT_UBUNTU2404}")
@@ -479,6 +481,9 @@ endif()
 if(SSG_PRODUCT_SLMICRO5)
     add_subdirectory("products/slmicro5" "slmicro5")
 endif()
+if(SSG_PRODUCT_SLMICRO6)
+    add_subdirectory("products/slmicro6" "slmicro6")
+endif()
 if(SSG_PRODUCT_TENCENTOS4)
     add_subdirectory("products/tencentos4" "tencentos4")
 endif()

diff --git a/build_product b/build_product
@@ -384,6 +384,7 @@ all_cmake_products=(
 	SLE12
 	SLE15
 	SLMICRO5
+	SLMICRO6
 	TENCENTOS4
 	UBUNTU2204
 	UBUNTU2404

diff --git a/...ing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmod/rule.yml b/...ing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmod/rule.yml
@@ -34,6 +34,7 @@ identifiers:
     cce@sle12: CCE-83133-9
     cce@sle15: CCE-85694-8
     cce@slmicro5: CCE-93653-4
+    cce@slmicro6: CCE-94634-3
 
 references:
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8,9

diff --git a/...ditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fremovexattr/rule.yml b/...ditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fremovexattr/rule.yml
@@ -51,6 +51,7 @@ identifiers:
     cce@sle12: CCE-83138-8
     cce@sle15: CCE-85686-4
     cce@slmicro5: CCE-93651-8
+    cce@slmicro6: CCE-94632-7
 
 references:
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8,9

diff --git a/...ing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lchown/rule.yml b/...ing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lchown/rule.yml
@@ -37,6 +37,7 @@ identifiers:
     cce@sle12: CCE-83135-4
     cce@sle15: CCE-85691-4
     cce@slmicro5: CCE-93652-6
+    cce@slmicro6: CCE-94633-5
 
 references:
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8,9

diff --git a/...ng/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_umount2/rule.yml b/...ng/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_umount2/rule.yml
@@ -33,6 +33,7 @@ identifiers:
     cce@sle12: CCE-83219-6
     cce@sle15: CCE-91250-1
     cce@slmicro5: CCE-93655-9
+    cce@slmicro6: CCE-94636-8
 
 references:
     nist@sle12: AU-3,AU-3.1,AU-12.1(ii),AU-12(a),AU-12.1(iv),AU-12(c),MA-4(1)(a)

diff --git a/.../auditd_configure_rules/audit_execution_acl_commands/audit_rules_execution_chacl/rule.yml b/.../auditd_configure_rules/audit_execution_acl_commands/audit_rules_execution_chacl/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@sle12: CCE-83190-9
     cce@sle15: CCE-85595-7
     cce@slmicro5: CCE-93618-7
+    cce@slmicro6: CCE-94619-4
 
 references:
     cis@ubuntu2204: 4.1.3.17

diff --git a/.../auditd_configure_rules/audit_execution_acl_commands/audit_rules_execution_chmod/rule.yml b/.../auditd_configure_rules/audit_execution_acl_commands/audit_rules_execution_chmod/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@sle12: CCE-83214-7
     cce@sle15: CCE-85593-2
     cce@slmicro5: CCE-93616-1
+    cce@slmicro6: CCE-94617-8
 
 references:
     nist@sle12: AU-3,AU-3.1,AU-12.1(ii),AU-12(a),AU-12.1(iv),AU-12(c),MA-4(1)(a)

diff --git a/...uditd_configure_rules/audit_execution_acl_commands/audit_rules_execution_setfacl/rule.yml b/...uditd_configure_rules/audit_execution_acl_commands/audit_rules_execution_setfacl/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@sle12: CCE-83189-1
     cce@sle15: CCE-85594-0
     cce@slmicro5: CCE-93617-9
+    cce@slmicro6: CCE-94618-6
 
 references:
     cis@ubuntu2204: 4.1.3.16

diff --git a/...itd_configure_rules/audit_execution_selinux_commands/audit_rules_execution_chcon/rule.yml b/...itd_configure_rules/audit_execution_selinux_commands/audit_rules_execution_chcon/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@sle12: CCE-83215-4
     cce@sle15: CCE-85716-9
     cce@slmicro5: CCE-93619-5
+    cce@slmicro6: CCE-94620-2
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...auditd_configure_rules/audit_execution_selinux_commands/audit_rules_execution_rm/rule.yml b/...auditd_configure_rules/audit_execution_selinux_commands/audit_rules_execution_rm/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@sle12: CCE-83216-2
     cce@sle15: CCE-85596-5
     cce@slmicro5: CCE-93620-3
+    cce@slmicro6: CCE-94621-0
 
 references:
     nist@sle12: AU-3,AU-3.1,AU-12.1(ii),AU-12(a),AU-12.1(iv),AU-12(c),MA-4(1)(a)

diff --git a/..._configure_rules/audit_execution_selinux_commands/audit_rules_execution_semanage/rule.yml b/..._configure_rules/audit_execution_selinux_commands/audit_rules_execution_semanage/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel10: CCE-89541-7
     cce@sle15: CCE-85819-1
     cce@slmicro5: CCE-94098-1
+    cce@slmicro6: CCE-95095-6 
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/..._configure_rules/audit_execution_selinux_commands/audit_rules_execution_setfiles/rule.yml b/..._configure_rules/audit_execution_selinux_commands/audit_rules_execution_setfiles/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel9: CCE-83736-9
     cce@rhel10: CCE-88818-0
     cce@slmicro5: CCE-94099-9
+    cce@slmicro6: CCE-95097-2
 
 references:
     nist: AU-2(d),AU-12(c),AC-6(9),CM-6(a)

diff --git a/...configure_rules/audit_execution_selinux_commands/audit_rules_execution_setsebool/rule.yml b/...configure_rules/audit_execution_selinux_commands/audit_rules_execution_setsebool/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel10: CCE-87741-5
     cce@sle15: CCE-85818-3
     cce@slmicro5: CCE-94100-5
+    cce@slmicro6: CCE-95098-0
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...re_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open/rule.yml b/...re_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open/rule.yml
@@ -45,6 +45,7 @@ identifiers:
     cce@sle12: CCE-83131-3
     cce@sle15: CCE-85680-7
     cce@slmicro5: CCE-93666-6
+    cce@slmicro6: CCE-94649-1
 
 references:
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8,9

diff --git a/..._rules/audit_file_modification/audit_rules_unsuccessful_file_modification_rename/rule.yml b/..._rules/audit_file_modification/audit_rules_unsuccessful_file_modification_rename/rule.yml
@@ -36,6 +36,7 @@ identifiers:
     cce@sle12: CCE-83251-9
     cce@sle15: CCE-85701-1
     cce@slmicro5: CCE-93667-4
+    cce@slmicro6: CCE-94731-7
 
 references:
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8,9
@@ -78,14 +79,14 @@ template:
         syscall_grouping:
           - rename
           - renameat
-          {{% if product in ['sle15', 'slmicro5'] %}}
+          {{% if product in ['sle15', 'slmicro5', 'slmicro6'] %}}
           - renameat2
           {{% endif %}}
           - unlink
           - unlinkat
 
 fixtext: |-
-    {{%- if product in ['sle15' ,'slmicro5'] %}}
+    {{%- if product in ['sle15' ,'slmicro5', 'slmicro6'] %}}
     {{{ fixtext_audit_rules_unsuccessful_file_modification("rename", ["renameat", "renameat2", "unlink", "unlinkat"]) | indent(4) }}}
     {{%- else %}}
     {{{ fixtext_audit_rules_unsuccessful_file_modification("rename", ["renameat", "unlink", "unlinkat"]) | indent(4) }}}

diff --git a/...igure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_delete/rule.yml b/...igure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_delete/rule.yml
@@ -34,6 +34,7 @@ identifiers:
     cce@sle12: CCE-83128-9
     cce@sle15: CCE-85748-2
     cce@slmicro5: CCE-93675-7
+    cce@slmicro6: CCE-94653-3
 
 references:
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8,9

diff --git a/...figure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_finit/rule.yml b/...figure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_finit/rule.yml
@@ -37,6 +37,7 @@ identifiers:
     cce@sle12: CCE-83129-7
     cce@sle15: CCE-85749-0
     cce@slmicro5: CCE-93676-5
+    cce@slmicro6: CCE-94654-1
 
 references:
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8,9

diff --git a/...iting/auditd_configure_rules/audit_login_events/audit_rules_login_events_lastlog/rule.yml b/...iting/auditd_configure_rules/audit_login_events/audit_rules_login_events_lastlog/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@sle12: CCE-83108-1
     cce@sle15: CCE-85598-1
     cce@slmicro5: CCE-93665-8
+    cce@slmicro6: CCE-94629-3
 
 references:
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8,9

diff --git a/...ting/auditd_configure_rules/audit_login_events/audit_rules_login_events_tallylog/rule.yml b/...ting/auditd_configure_rules/audit_login_events/audit_rules_login_events_tallylog/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@sle12: CCE-83107-3
     cce@sle15: CCE-85597-3
     cce@slmicro5: CCE-93664-1
+    cce@slmicro6: CCE-94628-5
 
 references:
     cis-csc: 1,11,12,13,14,15,16,19,2,3,4,5,6,7,8,9

diff --git a/..._configure_rules/audit_privileged_commands/audit_rules_privileged_commands_chage/rule.yml b/..._configure_rules/audit_privileged_commands/audit_rules_privileged_commands_chage/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@sle12: CCE-83110-7
     cce@sle15: CCE-85587-4
     cce@slmicro5: CCE-93607-0
+    cce@slmicro6: CCE-94611-1
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...d_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_chfn/rule.yml b/...d_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_chfn/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@sle12: CCE-83187-5
     cce@sle15: CCE-85589-0
     cce@slmicro5: CCE-93610-4
+    cce@slmicro6: CCE-94614-5
 
 references:
     cis@ubuntu2204: 4.1.3.6

diff --git a/...d_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_chsh/rule.yml b/...d_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_chsh/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@sle12: CCE-83163-6
     cce@sle15: CCE-85586-6
     cce@slmicro5: CCE-93605-4
+    cce@slmicro6: CCE-94609-5
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...onfigure_rules/audit_privileged_commands/audit_rules_privileged_commands_crontab/rule.yml b/...onfigure_rules/audit_privileged_commands/audit_rules_privileged_commands_crontab/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@sle12: CCE-83126-3
     cce@sle15: CCE-85588-2
     cce@slmicro5: CCE-93608-8
+    cce@slmicro6: CCE-94612-9
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...onfigure_rules/audit_privileged_commands/audit_rules_privileged_commands_gpasswd/rule.yml b/...onfigure_rules/audit_privileged_commands/audit_rules_privileged_commands_gpasswd/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@sle12: CCE-83161-0
     cce@sle15: CCE-85584-1
     cce@slmicro5: CCE-93603-9
+    cce@slmicro6: CCE-94607-9
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...configure_rules/audit_privileged_commands/audit_rules_privileged_commands_insmod/rule.yml b/...configure_rules/audit_privileged_commands/audit_rules_privileged_commands_insmod/rule.yml
@@ -31,6 +31,7 @@ identifiers:
     cce@sle12: CCE-92258-3
     cce@sle15: CCE-85744-1
     cce@slmicro5: CCE-93612-0
+    cce@slmicro6: CCE-94650-9
 
 references:
     cis@sle12: 4.1.16

diff --git a/...d_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_kmod/rule.yml b/...d_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_kmod/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@sle12: CCE-83207-1
     cce@sle15: CCE-85591-6
     cce@slmicro5: CCE-93615-3
+    cce@slmicro6: CCE-94616-0
 
 references:
     nist: AU-3,AU-3.1,AU-12(a),AU-12.1(ii),AU-12.1(iv)AU-12(c),MA-4(1)(a)

diff --git a/...nfigure_rules/audit_privileged_commands/audit_rules_privileged_commands_modprobe/rule.yml b/...nfigure_rules/audit_privileged_commands/audit_rules_privileged_commands_modprobe/rule.yml
@@ -35,6 +35,7 @@ identifiers:
     cce@sle12: CCE-92257-5
     cce@sle15: CCE-85731-8
     cce@slmicro5: CCE-93614-6
+    cce@slmicro6: CCE-94652-5
 
 references:
     cis@sle12: 4.1.16

diff --git a/...configure_rules/audit_privileged_commands/audit_rules_privileged_commands_newgrp/rule.yml b/...configure_rules/audit_privileged_commands/audit_rules_privileged_commands_newgrp/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@sle12: CCE-83162-8
     cce@sle15: CCE-85585-8
     cce@slmicro5: CCE-93604-7
+    cce@slmicro6: CCE-94608-7
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...es/audit_privileged_commands/audit_rules_privileged_commands_pam_timestamp_check/rule.yml b/...es/audit_privileged_commands/audit_rules_privileged_commands_pam_timestamp_check/rule.yml
@@ -1,4 +1,4 @@
-{{% if product in ["sle12", "sle15", "slmicro5"] %}}
+{{% if product in ["sle12", "sle15", "slmicro5", "slmicro6"] %}}
 {{% set pam_bin_path = "/sbin/pam_timestamp_check" %}}
 {{% else %}}
 {{% set pam_bin_path = "/usr/sbin/pam_timestamp_check" %}}
@@ -33,6 +33,7 @@ identifiers:
     cce@sle12: CCE-83127-1
     cce@sle15: CCE-85601-3
     cce@slmicro5: CCE-93622-9
+    cce@slmicro6: CCE-94623-6
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9
@@ -51,7 +52,7 @@ references:
     stigid@sle15: SLES-15-030510
     stigid@ubuntu2204: UBTU-22-654075
 
-{{% if product not in ["sle12", "sle15", "slmicro5"] %}}
+{{% if product not in ["sle12", "sle15", "slmicro5", "slmicro6"] %}}
 {{{ ocil_fix_srg_privileged_command("pam_timestamp_check", &qu
F438
ot;/usr/sbin/") }}}
 {{% endif %}}
 

diff --git a/...configure_rules/audit_privileged_commands/audit_rules_privileged_commands_passwd/rule.yml b/...configure_rules/audit_privileged_commands/audit_rules_privileged_commands_passwd/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@sle12: CCE-83160-2
     cce@sle15: CCE-85583-3
     cce@slmicro5: CCE-93602-1
+    cce@slmicro6: CCE-94606-1
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/..._configure_rules/audit_privileged_commands/audit_rules_privileged_commands_rmmod/rule.yml b/..._configure_rules/audit_privileged_commands/audit_rules_privileged_commands_rmmod/rule.yml
@@ -31,6 +31,7 @@ identifiers:
     cce@sle12: CCE-92256-7
     cce@sle15: CCE-85732-6
     cce@slmicro5: CCE-93613-8
+    cce@slmicro6: CCE-94651-7
 
 references:
     cis@sle12: 4.1.16

diff --git a/...figure_rules/audit_privileged_commands/audit_rules_privileged_commands_ssh_agent/rule.yml b/...figure_rules/audit_privileged_commands/audit_rules_privileged_commands_ssh_agent/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@sle12: CCE-83199-0
     cce@sle15: CCE-85590-8
     cce@slmicro5: CCE-93611-2
+    cce@slmicro6: CCE-94615-2
 
 references:
     cis@ubuntu2204: 4.1.3.6

diff --git a/...gure_rules/audit_privileged_commands/audit_rules_privileged_commands_ssh_keysign/rule.yml b/...gure_rules/audit_privileged_commands/audit_rules_privileged_commands_ssh_keysign/rule.yml
@@ -1,5 +1,7 @@
 {{%- if product in ["sle12", "sle15", "slmicro5"] %}}
   {{%- set ssh_keysign_path="/usr/lib/ssh/ssh-keysign" %}}
+{{%- elif 'slmicro6' in product %}}
+  {{%- set ssh_keysign_path="/usr/libexec/ssh/ssh-keysign" %}}
 {{%- elif 'ubuntu' in product %}}
   {{%- set ssh_keysign_path="/usr/lib/openssh/ssh-keysign" %}}
 {{%- else %}}
@@ -36,6 +38,7 @@ identifiers:
     cce@sle12: CCE-83159-4
     cce@sle15: CCE-85582-5
     cce@slmicro5: CCE-94071-8
+    cce@slmicro6: CCE-94605-3
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...itd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_su/rule.yml b/...itd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_su/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@sle12: CCE-83143-8
     cce@sle15: CCE-85602-1
     cce@slmicro5: CCE-93623-7
+    cce@slmicro6: CCE-94624-4
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...d_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_sudo/rule.yml b/...d_configure_rules/audit_privileged_commands/audit_rules_privileged_commands_sudo/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@sle12: CCE-83144-6
     cce@sle15: CCE-85603-9
     cce@slmicro5: CCE-93624-5
+    cce@slmicro6: CCE-94625-1
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...nfigure_rules/audit_privileged_commands/audit_rules_privileged_commands_sudoedit/rule.yml b/...nfigure_rules/audit_privileged_commands/audit_rules_privileged_commands_sudoedit/rule.yml
@@ -26,6 +26,7 @@ identifiers:
     cce@rhel10: CCE-89601-9
     cce@sle15: CCE-85717-7
     cce@slmicro5: CCE-93609-6
+    cce@slmicro6: CCE-94613-7
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9

diff --git a/...gure_rules/audit_privileged_commands/audit_rules_privileged_commands_unix_chkpwd/rule.yml b/...gure_rules/audit_privileged_commands/audit_rules_privileged_commands_unix_chkpwd/rule.yml
@@ -1,5 +1,5 @@
 {{%- set unix_chkpwd_binary="/usr/sbin/unix_chkpwd" %}}
-{{%- if product in ["fedora", "rhcos4", "sle12", "sle15", "slmicro5", "ubuntu2204", "ubuntu2404"] or 'ol' in families or 'rhel' in product %}}  
+{{%- if product in ["fedora", "rhcos4", "sle12", "sle15", "slmicro5", "slmicro6", "ubuntu2204", "ubuntu2404"] or 'ol' in families or 'rhel' in product %}}  
     {{%- set unix_chkpwd_binary="/sbin/unix_chkpwd" %}}
 {{%- endif %}}
 
@@ -33,6 +33,7 @@ identifiers:
     cce@sle12: CCE-83109-9
     cce@sle15: CCE-85727-6
     cce@slmicro5: CCE-93606-2
+    cce@slmicro6: CCE-94610-3
 
 references:
     cis-csc: 1,12,13,14,15,16,2,3,5,6,7,8,9
@@ -61,3 +62,4 @@ template:
         path@sle12: /sbin/unix_chkpwd
         path@sle15: /sbin/unix_chkpwd
         path@slmicro5: /sbin/unix_chkpwd
+        path@slmicro6: /sbin/unix_chkpwd
diff --git a/...onfigure_rules/audit_privileged_commands/audit_rules_privileged_commands_usermod/rule.yml b/...onfigure_rules/audit_privileged_commands/audit_rules_privileged_commands_usermod/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@sle12: CCE-83191-7
     cce@sle15: CCE-85600-5
     cce@slmicro5: CCE-93621-1
+    cce@slmicro6: CCE-94622-8
 
 references:
     cis@ubuntu2204: 4.1.3.18

diff --git a/...de/auditing/auditd_configure_rules/audit_rules_enable_syscall_auditing/ansible/shared.yml b/...de/auditing/auditd_configure_rules/audit_rules_enable_syscall_auditing/ansible/shared.yml
@@ -34,7 +34,7 @@
 - name: Enable syscall auditing (augenrules)
   lineinfile:
     path: "{{ item.path }}"
-    regex: ^(?i)(\s*-a\s+task,never)\s*$
+    regex: (?i)^(\s*-a\s+task,never)\s*$
     line: '#-a task,never'
   with_items: "{{ find_audit_rules_result.files }}"
   when:
@@ -45,7 +45,7 @@
 - name: Enable syscall auditing (auditctl)
   lineinfile:
     path: /etc/audit/audit.rules
-    regex: ^(?i)(\s*-a\s+task,never)\s*$
+    regex: (?i)^(\s*-a\s+task,never)\s*$
     line: '#-a task,never'
   when:
     - '"auditd.service" in ansible_facts.services'