From 370e7f52df1021d81a505ebcbce6e5e359102287 Mon Sep 17 00:00:00 2001 From: Israel Villar Boillos Date: Thu, 6 Aug 2026 22:30:34 +0100 Subject: [PATCH] controls/cis_debian13: map 1.2.1.2 to apt_disable_weak_dependencies apt_conf_disable_recommends and apt_conf_disable_suggests only have SCE checks, which fail silently on systems with noexec /tmp (CIS 1.1.2.4). apt_disable_weak_dependencies covers the same requirement with a real OVAL check. --- controls/cis_debian13.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/controls/cis_debian13.yml b/controls/cis_debian13.yml index 697e1fb15b5d..5bab8741d1e9 100644 --- a/controls/cis_debian13.yml +++ b/controls/cis_debian13.yml @@ -363,8 +363,7 @@ controls: - l2_server - l2_workstation rules: - - apt_conf_disable_recommends - - apt_conf_disable_suggests + - apt_disable_weak_dependencies status: automated - id: 1.2.1.3