[Debian12] Add support debian to disable snmpd service

linux_os/guide/services/snmp/disabling_snmp_service/package_net-snmp_removed/rule.yml

@@ -45,6 +45,7 @@ template:
     vars:
         pkgname: net-snmp
         pkgname@debian11: snmp
+        pkgname@debian12: snmpd
         pkgname@ubuntu1604: snmp
         pkgname@ubuntu1804: snmp
         pkgname@ubuntu2004: snmp

linux_os/guide/services/snmp/disabling_snmp_service/service_snmpd_disabled/rule.yml

@@ -38,7 +38,7 @@ template:
     name: service_disabled
     vars:
         servicename: snmpd
+        packagename: net-snmp
         packagename@debian11: snmpd
         packagename@debian12: snmpd
         packagename@ubuntu2404: snmpd
-        packagename: net-snmp

products/debian12/product.yml

@@ -12,16 +12,22 @@ benchmark_id: DEBIAN-12
 benchmark_root: "../../linux_os/guide"
 
 profiles_root: "./profiles"
+components_root: "../../components"
 
 pkg_manager: "apt_get"
+pkg_manager_config_file: "/etc/apt/apt.conf"
 
 init_system: "systemd"
-
 oval_feed_url: "https://www.debian.org/security/oval/oval-definitions-bookworm.xml.bz2"
 
-chrony_conf_path: "/etc/chrony/chrony.conf"
-chrony_d_path: "/etc/chrony/chrony.d/"
+sshd_distributed_config: "true"
+
+aide_bin_path: "/usr/bin/aide"
 aide_conf_path: "/etc/aide/aide.conf"
+aide_default_path: "/etc/default/aide"
+audisp_conf_path: "/etc/audit"
+chrony_conf_path: "/etc/chrony/chrony.conf"
+chrony_d_path: "/etc/chrony/conf.d/"
 
 cpes_root: "../../shared/applicability"
 cpes:
@@ -32,10 +38,19 @@ cpes:
 
 # Mapping of CPE platform to package
 platform_package_overrides:
+  audit: auditd
+  avahi: avahi-daemon
+  dconf: dconf-editor
   gdm: gdm3
   grub2: grub2-common
   net-snmp: snmp
+  NetworkManager: network-manager
   nss-pam-ldapd: libpam-ldap
   pam: libpam-runtime
   shadow: login
   sssd: sssd-common
+  openssl-pkcs11: libpam-pkcs11
+
+reference_uris:
+  cis: 'https://www.cisecurity.org/benchmark/debian_linux/'
+

products/debian12/profiles/cis_level1_server.profile

@@ -0,0 +1,26 @@
+documentation_complete: true
+
+metadata:
+    version: draft
+    SMEs:
+        - blasci
+
+reference: https://www.cisecurity.org/benchmark/debian_linux
+
+title: 'DRAFT - CIS Debian Linux 12 Benchmark for Level 1 - Server'
+
+description: |-
+    This profile defines a baseline that aligns to the "Level 1 - Server"
+    configuration from the Center for Internet Security® 
+    Debian Linux 12 Benchmark™, v1.1.0, released 2024-09-26.
+
+    This profile includes Center for Internet Security®
+    Debian Linux 12 Benchmark™ content.
+
+selections:
+    - cis_debian12:all:l1_server
+    # Define default firewall
+    - var_network_filtering_service=nftables
+    # Define default ntp service
+    - var_timesync_service=systemd-timesyncd
+

products/debian12/profiles/cis_level1_workstation.profile

@@ -0,0 +1,26 @@
+documentation_complete: true
+
+metadata:
+    version: draft
+    SMEs:
+        - blasci
+
+reference: https://www.cisecurity.org/benchmark/debian_linux
+
+title: 'DRAFT - CIS Debian Linux 12 Benchmark for Level 1 - Workstation'
+
+description: |-
+    This profile defines a baseline that aligns to the "Level 1 - Workstation"
+    configuration from the Center for Internet Security® 
+    Debian Linux 12 Benchmark™, v1.1.0, released 2024-09-26.
+
+    This profile includes Center for Internet Security®
+    Debian Linux 12 Benchmark™ content.
+
+selections:
+    - cis_debian12:all:l1_workstation
+    # Define default firewall
+    - var_network_filtering_service=nftables
+    # Define default ntp service
+    - var_timesync_service=systemd-timesyncd
+

products/debian12/profiles/cis_level2_server.profile

@@ -0,0 +1,27 @@
+documentation_complete: true
+
+metadata:
+    version: draft
+    SMEs:
+        - blasci
+
+reference: https://www.cisecurity.org/benchmark/debian_linux
+
+title: 'DRAFT - CIS Debian Linux 12 Benchmark for Level 2 - Server'
+
+description: |-
+    This profile defines a baseline that aligns to the "Level 2 - Server"
+    configuration from the Center for Internet Security® 
+    Debian Linux 12 Benchmark™, v1.1.0, released 2024-09-26.
+
+    This profile includes Center for Internet Security®
+    Debian Linux 12 Benchmark™ content.
+
+selections:
+    - cis_debian12:all:l2_server
+    - '!zipl_audit_argument'
+    - '!zipl_audit_backlog_limit_argument'
+    # Define default firewall
+    - var_network_filtering_service=nftables
+    # Define default ntp service
+    - var_timesync_service=systemd-timesyncd

products/debian12/profiles/cis_level2_workstation.profile

@@ -0,0 +1,28 @@
+documentation_complete: true
+
+metadata:
+    version: draft
+    SMEs:
+        - blasci
+
+reference: https://www.cisecurity.org/benchmark/debian_linux
+
+title: 'DRAFT - CIS Debian Linux 12 Benchmark for Level 2 - Workstation'
+
+description: |-
+    This profile defines a baseline that aligns to the "Level 2 - Workstation"
+    configuration from the Center for Internet Security® 
+    Debian Linux 12 Benchmark™, v1.1.0, released 2024-09-26.
+
+    This profile includes Center for Internet Security®
+    Debian Linux 12 Benchmark™ content.
+
+selections:
+    - cis_debian12:all:l2_workstation
+    - '!zipl_audit_argument'
+    - '!zipl_audit_backlog_limit_argument'
+    # Define default firewall
+    - var_network_filtering_service=nftables
+    # Define default ntp service
+    - var_timesync_service=systemd-timesyncd
+