documentation_complete: true


title: 'Install the pam_apparmor Package'

description: |-
    {{{ describe_package_install(package="pam_apparmor") }}}

rationale: |-
    Protection of system integrity using AppArmor depends on this package being
    installed.

severity: medium

identifiers:
    cce@sle12: CCE-83225-3
    cce@sle15: CCE-85765-6
    cce@slmicro5: CCE-94022-1

references:
    cis@sle12: 1.7.1.1
    cis@sle15: 1.7.1.1
    nist: AC-3(4),AC-6(8),AC-6(10),CM-7(5)(b),CM-7(2),SC-7(21),CM-6(a)
    srg: SRG-OS-000312-GPOS-00122,SRG-OS-000312-GPOS-00123,SRG-OS-000312-GPOS-00124,SRG-OS-000324-GPOS-00125,SRG-OS-000326-GPOS-00126,SRG-OS-000370-GPOS-00155,SRG-OS-000480-GPOS-00230,SRG-OS-000480-GPOS-00227,SRG-OS-000480-GPOS-00231,SRG-OS-000480-GPOS-00232
    stigid@sle12: SLES-12-010600
    stigid@sle15: SLES-15-010390

ocil_clause: 'the package is not installed'

ocil: '{{{ ocil_package(package="pam_apparmor") }}}'

template:
    name: package_installed
    vars:
        pkgname: pam_apparmor
        pkgname@debian12: libpam-apparmor
        pkgname@debian13: libpam-apparmor
