Add alinux2/alinux3 support for pci-dss compliance.

Signed-off-by: YuQing.Yang <[email protected]>
Signed-off-by: YiLin.Li <[email protected]>

Author: rain-Qing

products/alinux2/profiles/pci-dss.profile

@@ -0,0 +1,27 @@
+documentation_complete: true
+
+metadata:
+    version: '4.0'
+    SMEs:
+        - YiLin.Li
+        - YuQing.Yang
+
+reference: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
+
+title: 'PCI-DSS v4.0 Control Baseline for Alibaba Cloud Linux 2'
+
+description: |-
+    Payment Card Industry - Data Security Standard (PCI-DSS) is a set of
+    security standards designed to ensure the secure handling of payment card
+    data, with the goal of preventing data breaches and protecting sensitive
+    financial information.
+
+selections:
+    - pcidss_4:all
+    - '!rpm_verify_permissions'
+    - '!package_audit-audispd-plugins_installed'
+    - '!service_ntp_enabled'
+    - '!set_ipv6_loopback_traffic'
+    - '!set_loopback_traffic'
+    - '!timer_logrotate_enabled'
+    - '!ensure_redhat_gpgkey_installed'

products/alinux3/profiles/pci-dss.profile

@@ -0,0 +1,34 @@
+documentation_complete: true
+
+metadata:
+    version: '4.0'
+    SMEs:
+        - YiLin.Li
+        - YuQing.Yang
+
+reference: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf
+
+title: 'PCI-DSS v4.0 Control Baseline for Alibaba Cloud Linux 3'
+
+description: |-
+    Payment Card Industry - Data Security Standard (PCI-DSS) is a set of
+    security standards designed to ensure the secure handling of payment card
+    data, with the goal of preventing data breaches and protecting sensitive
+    financial information.
+
+selections:
+    - pcidss_4:all
+    - '!rpm_verify_permissions'
+    - '!package_audit-audispd-plugins_installed'
+    - '!service_ntp_enabled'
+    - '!ntpd_specify_remote_server'
+    - '!ntpd_specify_multiple_servers'
+    - '!set_ipv6_loopback_traffic'
+    - '!set_loopback_traffic'
+    - '!service_ntpd_enabled'
+    - '!timer_logrotate_enabled'
+    - '!package_talk_removed'
+    - '!package_talk-server_removed'
+    - '!package_rsh_removed'
+    - '!package_rsh-server_removed'
+    - '!ensure_redhat_gpgkey_installed'