File add-leapmicro6-product.patch of Package scap-security-guide

From eab95960cb8cae5c411fbb4f49e0b656b74db63b Mon Sep 17 00:00:00 2001
From: Matthias Eliasson <matthias.eliasson@fortnox.se>
Date: Wed, 26 Nov 2025 12:16:52 +0100
Subject: [PATCH] Add openSUSE Leap Micro 6 product

- Create leapmicro6 product based on slmicro6
- Add CPE definitions for Leap Micro 6.0, 6.1, and 6.2
- Update product mappings in ssg/constants.py
- Add leapmicro6 selector to var_accounts_authorized_local_users_regex
- Add multi_platform_leapmicro support to sysctl_kernel_ipv6_disable OVAL
- Configure CMake build system for leapmicro6 product
- Create CPE check for openSUSE Leap Micro detection
---
 CMakeLists.txt                                |  5 ++
 ..._accounts_authorized_local_users_regex.var |  1 +
 products/leapmicro6/CMakeLists.txt            | 10 ++++
 products/leapmicro6/product.yml               | 47 ++++++++++++++++++
 products/leapmicro6/profiles/general.profile  | 25 ++++++++++
 products/leapmicro6/transforms/constants.xslt | 12 +++++
 .../leapmicro6/transforms/table-style.xslt    |  5 ++
 .../transforms/xccdf-apply-overlay-stig.xslt  |  8 +++
 .../transforms/xccdf2table-cce.xslt           |  9 ++++
 .../xccdf2table-profileccirefs.xslt           |  9 ++++
 .../oval/installed_OS_is_leapmicro6.xml       | 49 +++++++++++++++++++
 .../oval/sysctl_kernel_ipv6_disable.xml       | 43 ++++++++--------
 ssg/constants.py                              |  5 +-
 13 files changed, 207 insertions(+), 21 deletions(-)
 create mode 100644 products/leapmicro6/CMakeLists.txt
 create mode 100644 products/leapmicro6/product.yml
 create mode 100644 products/leapmicro6/profiles/general.profile
 create mode 100644 products/leapmicro6/transforms/constants.xslt
 create mode 100644 products/leapmicro6/transforms/table-style.xslt
 create mode 100644 products/leapmicro6/transforms/xccdf-apply-overlay-stig.xslt
 create mode 100644 products/leapmicro6/transforms/xccdf2table-cce.xslt
 create mode 100644 products/leapmicro6/transforms/xccdf2table-profileccirefs.xslt
 create mode 100644 shared/checks/oval/installed_OS_is_leapmicro6.xml

diff --git a/CMakeLists.txt b/CMakeLists.txt
index c16a3d91c1..9cd828d00e 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -119,6 +119,7 @@ option(SSG_PRODUCT_SLE12 "If enabled, the SLE12 SCAP content will be built" ${SS
 option(SSG_PRODUCT_SLE15 "If enabled, the SLE15 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_SLMICRO5 "If enabled, the SLE Micro 5 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_SLMICRO6 "If enabled, the SLE Micro 6 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
+option(SSG_PRODUCT_LEAPMICRO6 "If enabled, the openSUSE Leap Micro 6 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_TENCENTOS4 "If enabled, the TencentOS Server 4 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_UBUNTU2204 "If enabled, the Ubuntu 22.04 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
 option(SSG_PRODUCT_UBUNTU2404 "If enabled, the Ubuntu 24.04 SCAP content will be built" ${SSG_PRODUCT_DEFAULT})
@@ -360,6 +361,7 @@ message(STATUS "SUSE 12: ${SSG_PRODUCT_SLE12}")
 message(STATUS "SUSE 15: ${SSG_PRODUCT_SLE15}")
 message(STATUS "SLE Micro 5: ${SSG_PRODUCT_SLMICRO5}")
 message(STATUS "SLE Micro 6: ${SSG_PRODUCT_SLMICRO6}")
+message(STATUS "openSUSE Leap Micro 6: ${SSG_PRODUCT_LEAPMICRO6}")
 message(STATUS "TencentOS Server 4: ${SSG_PRODUCT_TENCENTOS4}")
 message(STATUS "Ubuntu 22.04: ${SSG_PRODUCT_UBUNTU2204}")
 message(STATUS "Ubuntu 24.04: ${SSG_PRODUCT_UBUNTU2404}")
@@ -484,6 +486,9 @@ endif()
 if(SSG_PRODUCT_SLMICRO6)
     add_subdirectory("products/slmicro6" "slmicro6")
 endif()
+if(SSG_PRODUCT_LEAPMICRO6)
+    add_subdirectory("products/leapmicro6" "leapmicro6")
+endif()
 if(SSG_PRODUCT_TENCENTOS4)
     add_subdirectory("products/tencentos4" "tencentos4")
 endif()
diff --git a/linux_os/guide/system/accounts/accounts-restrictions/var_accounts_authorized_local_users_regex.var b/linux_os/guide/system/accounts/accounts-restrictions/var_accounts_authorized_local_users_regex.var
index faa73c6dd2..001a91e77e 100644
--- a/linux_os/guide/system/accounts/accounts-restrictions/var_accounts_authorized_local_users_regex.var
+++ b/linux_os/guide/system/accounts/accounts-restrictions/var_accounts_authorized_local_users_regex.var
@@ -32,4 +32,5 @@ options:
     sle15: "^(root|bin|daemon|adm|lp|sync|shutdown|halt|mail|operator|games|ftp|nobody|pegasus|systemd-bus-proxy|systemd-network|dbus|polkitd|abrt|unbound|tss|libstoragemgmt|rpc|colord|usbmuxd$|pcp|saslauth|geoclue|setroubleshoot|rtkit|chrony|qemu|radvd|rpcuser|nfsnobody|pulse|gdm|gnome-initial-setup|postfix|avahi|ntp|sshd|tcpdump|oprofile|uuidd|systemd-resolve|systemd-coredump|sssd|rngd|man|systemd-timesync|scard|hacluster|statd|at|dockremap|vnc|messagebus|nscd|flatpak|srvGeoClue|tftp|wsdd|dnsmasq|usbmux|brltty)$"
     slmicro5: "^(root|bin|daemon|adm|lp|sync|shutdown|halt|mail|operator|games|ftp|nobody|pegasus|systemd-bus-proxy|systemd-network|dbus|polkitd|abrt|unbound|tss|libstoragemgmt|rpc|colord|usbmuxd$|pcp|saslauth|geoclue|setroubleshoot|rtkit|chrony|qemu|radvd|rpcuser|nfsnobody|pulse|gdm|gnome-initial-setup|postfix|avahi|ntp|sshd|tcpdump|oprofile|uuidd|systemd-resolve|systemd-coredump|sssd|rngd|man|systemd-timesync|scard|hacluster|statd|at|dockremap|vnc|messagebus|nscd|flatpak|srvGeoClue|tftp|wsdd|dnsmasq|usbmux|brltty|salt|cockpit-ws|cockpit-wsinstance)$"
     slmicro6: "^(root|bin|daemon|adm|lp|sync|shutdown|halt|mail|operator|games|ftp|nobody|pegasus|systemd-bus-proxy|systemd-network|dbus|polkitd|abrt|unbound|tss|libstoragemgmt|rpc|colord|usbmuxd$|pcp|saslauth|geoclue|setroubleshoot|rtkit|chrony|qemu|radvd|rpcuser|nfsnobody|pulse|gdm|gnome-initial-setup|postfix|avahi|ntp|sshd|tcpdump|oprofile|uuidd|systemd-resolve|systemd-coredump|sssd|rngd|man|systemd-timesync|scard|hacluster|statd|at|dockremap|vnc|messagebus|nscd|flatpak|srvGeoClue|tftp|wsdd|dnsmasq|usbmux|brltty|salt|cockpit-ws|cockpit-wsinstance)$"
+    leapmicro6: "^(root|bin|daemon|adm|lp|sync|shutdown|halt|mail|operator|games|ftp|nobody|pegasus|systemd-bus-proxy|systemd-network|dbus|polkitd|abrt|unbound|tss|libstoragemgmt|rpc|colord|usbmuxd$|pcp|saslauth|geoclue|setroubleshoot|rtkit|chrony|qemu|radvd|rpcuser|nfsnobody|pulse|gdm|gnome-initial-setup|postfix|avahi|ntp|sshd|tcpdump|oprofile|uuidd|systemd-resolve|systemd-coredump|sssd|rngd|man|systemd-timesync|scard|hacluster|statd|at|dockremap|vnc|messagebus|nscd|flatpak|srvGeoClue|tftp|wsdd|dnsmasq|usbmux|brltty|salt|cockpit-ws|cockpit-wsinstance)$"
     default: "^(root|bin|daemon|adm|lp|sync|shutdown|halt|mail|operator|games|ftp|nobody|tss|systemd-coredump|dbus|polkitd|avahi|colord|rtkit|pipewire|clevis|sssd|geoclue|flatpak|setroubleshoot|libstoragemgmt|systemd-oom|gdm|cockpit-ws|cockpit-wsinstance|gnome-initial-setup|sshd|chrony|dnsmasq|tcpdump|admin)$"
diff --git a/products/leapmicro6/CMakeLists.txt b/products/leapmicro6/CMakeLists.txt
new file mode 100644
index 0000000000..11701b0142
--- /dev/null
+++ b/products/leapmicro6/CMakeLists.txt
@@ -0,0 +1,10 @@
+# Sometimes our users will try to do: "cd leapmicro6; cmake ." That needs to error in a nice way.
+if("${CMAKE_SOURCE_DIR}" STREQUAL "${CMAKE_CURRENT_SOURCE_DIR}")
+    message(FATAL_ERROR "cmake has to be used on the root CMakeLists.txt, see the Building ComplianceAsCode section in the Developer Guide!")
+endif()
+
+set(PRODUCT "leapmicro6")
+ssg_build_product("leapmicro6")
+
+
+ssg_build_html_cce_table(${PRODUCT})
diff --git a/products/leapmicro6/product.yml b/products/leapmicro6/product.yml
new file mode 100644
index 0000000000..1ad4a5597b
--- /dev/null
+++ b/products/leapmicro6/product.yml
@@ -0,0 +1,47 @@
+product: leapmicro6
+full_name: openSUSE Leap Micro 6
+type: platform
+
+families:
+    - suse
+
+major_version_ordinal: 6
+
+benchmark_id: LEAPMICRO6
+benchmark_root: "../../linux_os/guide"
+
+profiles_root: "./profiles"
+
+init_system: "systemd"
+
+pkg_manager: "zypper"
+pkg_manager_config_file: "/etc/zypp/zypp.conf"
+
+aide_bin_path: "/usr/bin/aide"
+
+cpes_root: "../../shared/applicability"
+cpes:
+    - leapmicro-6.0:
+          name: "cpe:/o:opensuse:leap-micro:6.0"
+          title: "openSUSE Leap Micro 6.0"
+          check_id: installed_OS_is_leapmicro6
+    - leapmicro-6.1:
+          name: "cpe:/o:opensuse:leap-micro:6.1"
+          title: "openSUSE Leap Micro 6.1"
+          check_id: installed_OS_is_leapmicro6
+    - leapmicro-6.2:
+          name: "cpe:/o:opensuse:leap-micro:6.2"
+          title: "openSUSE Leap Micro 6.2"
+          check_id: installed_OS_is_leapmicro6
+
+platform_package_overrides:
+    login_defs: "shadow"
+    grub2: "grub2"
+    sssd: "sssd"
+    passwd: "shadow"
+
+reference_uris:
+    suse-general: "not_publicly_available"
+
+sysctl_remediate_drop_in_file: "true"
+journald_conf_dir_path: /etc/systemd/journal.conf.d
diff --git a/products/leapmicro6/profiles/general.profile b/products/leapmicro6/profiles/general.profile
new file mode 100644
index 0000000000..06e24b52c3
--- /dev/null
+++ b/products/leapmicro6/profiles/general.profile
@@ -0,0 +1,25 @@
+documentation_complete: true
+
+reference: not_publicly_available
+
+title: 'General profile for openSUSE Leap Micro 6'
+
+description: |-
+    This profile contains configuration checks that align to the
+    for openSUSE Leap Micro 6.
+
+selections:
+  - stig_slmicro5:all
+  - var_user_initialization_files_regex=all_dotfiles
+  - var_accounts_authorized_local_users_regex=leapmicro6
+  - '!accounts_passwords_pam_tally2'
+  - '!accounts_passwords_pam_tally2_file'
+  - '!accounts_passwords_pam_tally2_file_selinux'
+  - '!gnome_gdm_disable_unattended_automatic_login'
+  - '!partition_for_var_log_audit'
+  - '!pam_disable_automatic_configuration'
+  - '!mount_option_nosuid_remote_filesystems'
+  - '!mount_option_noexec_remote_filesystems'
+  - '!service_autofs_disabled'
+  - '!grub2_password'
+  - '!grub2_uefi_password'
diff --git a/products/leapmicro6/transforms/constants.xslt b/products/leapmicro6/transforms/constants.xslt
new file mode 100644
index 0000000000..31f2ff9322
--- /dev/null
+++ b/products/leapmicro6/transforms/constants.xslt
@@ -0,0 +1,12 @@
+<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
+
+    <xsl:include href="../../../shared/transforms/shared_constants.xslt" />
+
+    <xsl:variable name="product_long_name">openSUSE Leap Micro 6.x</xsl:variable>
+    <xsl:variable name="product_short_name">Leap Micro 6</xsl:variable>
+    <xsl:variable name="prod_type">leapmicro6</xsl:variable>
+
+    <!-- Define URI of official Center for Internet Security Benchmark for openSUSE Leap Micro 6-->
+    <xsl:variable name="cisuri">https://www.cisecurity.org/benchmark/opensuse/</xsl:variable>
+
+</xsl:stylesheet>
diff --git a/products/leapmicro6/transforms/table-style.xslt b/products/leapmicro6/transforms/table-style.xslt
new file mode 100644
index 0000000000..8b6caeab8c
--- /dev/null
+++ b/products/leapmicro6/transforms/table-style.xslt
@@ -0,0 +1,5 @@
+<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
+
+<xsl:import href="../../../shared/transforms/shared_table-style.xslt"/>
+
+</xsl:stylesheet>
diff --git a/products/leapmicro6/transforms/xccdf-apply-overlay-stig.xslt b/products/leapmicro6/transforms/xccdf-apply-overlay-stig.xslt
new file mode 100644
index 0000000000..4789419b80
--- /dev/null
+++ b/products/leapmicro6/transforms/xccdf-apply-overlay-stig.xslt
@@ -0,0 +1,8 @@
+<?xml version="1.0"?>
+<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns="http://checklists.nist.gov/xccdf/1.1" xmlns:xccdf="http://checklists.nist.gov/xccdf/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml" exclude-result-prefixes="xccdf">
+
+<xsl:include href="../../../shared/transforms/shared_xccdf-apply-overlay-stig.xslt"/>
+<xsl:include href="constants.xslt"/>
+<xsl:variable name="overlays" select="document($overlay)/xccdf:overlays" />
+
+</xsl:stylesheet>
diff --git a/products/leapmicro6/transforms/xccdf2table-cce.xslt b/products/leapmicro6/transforms/xccdf2table-cce.xslt
new file mode 100644
index 0000000000..f156a66956
--- /dev/null
+++ b/products/leapmicro6/transforms/xccdf2table-cce.xslt
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8" standalone="yes"?>
+<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:cce="http://cce.mitre.org" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cdf="http://checklists.nist.gov/xccdf/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml">
+
+<xsl:import href="../../../shared/transforms/shared_xccdf2table-cce.xslt"/>
+
+<xsl:include href="constants.xslt"/>
+<xsl:include href="table-style.xslt"/>
+
+</xsl:stylesheet>
diff --git a/products/leapmicro6/transforms/xccdf2table-profileccirefs.xslt b/products/leapmicro6/transforms/xccdf2table-profileccirefs.xslt
new file mode 100644
index 0000000000..9d8d3e5faf
--- /dev/null
+++ b/products/leapmicro6/transforms/xccdf2table-profileccirefs.xslt
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8" standalone="yes"?>
+<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cdf="http://checklists.nist.gov/xccdf/1.1" xmlns:cci="https://www.cyber.mil/stigs/cci" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:ovalns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
+
+<xsl:import href="../../../shared/transforms/shared_xccdf2table-profileccirefs.xslt"/>
+
+<xsl:include href="constants.xslt"/>
+<xsl:include href="table-style.xslt"/>
+
+</xsl:stylesheet>
diff --git a/shared/checks/oval/installed_OS_is_leapmicro6.xml b/shared/checks/oval/installed_OS_is_leapmicro6.xml
new file mode 100644
index 0000000000..ea95690971
--- /dev/null
+++ b/shared/checks/oval/installed_OS_is_leapmicro6.xml
@@ -0,0 +1,49 @@
+<def-group>
+    <definition class="inventory"
+        id="installed_OS_is_leapmicro6" version="1">
+        <metadata>
+            <title>openSUSE Leap Micro</title>
+            <affected family="unix">
+                <platform>multi_platform_all</platform>
+            </affected>
+            <reference ref_id="cpe:/o:opensuse:leap-micro:6.0"
+                source="CPE" />
+            <reference ref_id="cpe:/o:opensuse:leap-micro:6.1"
+                source="CPE" />
+            <reference ref_id="cpe:/o:opensuse:leap-micro:6.2"
+                source="CPE" />
+            <description>The operating system installed on the system is
+                openSUSE Leap Micro.</description>
+        </metadata>
+        <criteria>
+            <criterion comment="Installed operating system is part of the unix family"
+                test_ref="test_leapmicro6_unix_family" />
+            <criteria operator="OR">
+                <criterion comment="openSUSE Leap Micro 6.* is installed" test_ref="test_leapmicro6" />
+            </criteria>
+        </criteria>
+    </definition>
+
+    <ind:family_test check="all" check_existence="at_least_one_exists"
+        comment="installed OS part of unix family" id="test_leapmicro6_unix_family" version="1">
+        <ind:object object_ref="obj_leapmicro6_unix_family" />
+        <ind:state state_ref="state_leapmicro6_unix_family" />
+    </ind:family_test>
+    <ind:family_state id="state_leapmicro6_unix_family" version="1">
+        <ind:family>unix</ind:family>
+    </ind:family_state>
+    <ind:family_object id="obj_leapmicro6_unix_family" version="1" />
+
+    <linux:rpminfo_test check="all" check_existence="at_least_one_exists"
+        comment="openSUSE-leap-micro-release is version 6" id="test_leapmicro6" version="1">
+        <linux:object object_ref="obj_leapmicro6" />
+        <linux:state state_ref="state_leapmicro6" />
+    </linux:rpminfo_test>
+    <linux:rpminfo_state id="state_leapmicro6" version="1">
+        <linux:version operation="pattern match">^6.*$</linux:version>
+    </linux:rpminfo_state>
+    <linux:rpminfo_object id="obj_leapmicro6" version="1">
+        <linux:name>Leap-Micro-release</linux:name>
+    </linux:rpminfo_object>
+
+</def-group>
diff --git a/shared/checks/oval/sysctl_kernel_ipv6_disable.xml b/shared/checks/oval/sysctl_kernel_ipv6_disable.xml
index b718ded260..baf3a88959 100644
--- a/shared/checks/oval/sysctl_kernel_ipv6_disable.xml
+++ b/shared/checks/oval/sysctl_kernel_ipv6_disable.xml
@@ -3,31 +3,34 @@
     <metadata>
       <title>Kernel Runtime Parameter IPv6 Check</title>
       <affected family="unix">
-	<platform>multi_platform_alinux</platform>
-	<platform>multi_platform_almalinux</platform>
-	<platform>multi_platform_anolis</platform>
-	<platform>multi_platform_debian</platform>
-	<platform>multi_platform_example</platform>
-	<platform>multi_platform_fedora</platform>
-	<platform>multi_platform_kylinserver</platform>
-	<platform>multi_platform_openembedded</platform>
-	<platform>multi_platform_openeuler</platform>
-	<platform>multi_platform_opensuse</platform>
-	<platform>multi_platform_ol</platform>
-	<platform>multi_platform_rhcos</platform>
-	<platform>multi_platform_rhel</platform>
-	<platform>multi_platform_rhv</platform>
-	<platform>multi_platform_sle</platform>
-    <platform>multi_platform_slmicro</platform>
-    <platform>multi_platform_tencentos</platform>
-    <platform>multi_platform_ubuntu</platform>
+        <platform>multi_platform_alinux</platform>
+        <platform>multi_platform_almalinux</platform>
+        <platform>multi_platform_anolis</platform>
+        <platform>multi_platform_debian</platform>
+        <platform>multi_platform_example</platform>
+        <platform>multi_platform_fedora</platform>
+        <platform>multi_platform_kylinserver</platform>
+        <platform>multi_platform_openembedded</platform>
+        <platform>multi_platform_openeuler</platform>
+        <platform>multi_platform_opensuse</platform>
+        <platform>multi_platform_ol</platform>
+        <platform>multi_platform_rhcos</platform>
+        <platform>multi_platform_rhel</platform>
+        <platform>multi_platform_rhv</platform>
+        <platform>multi_platform_sle</platform>
+        <platform>multi_platform_slmicro</platform>
+        <platform>multi_platform_leapmicro</platform>
+        <platform>multi_platform_tencentos</platform>
+        <platform>multi_platform_ubuntu</platform>
       </affected>
       <description>Disables IPv6 for all network interfaces.</description>
     </metadata>
     <criteria comment="IPv6 disabled or net.ipv6.conf.all.disable_ipv6 set correctly" operator="OR">
       <criteria operator="AND">
-        <extend_definition comment="net.ipv6.conf.all.disable_ipv6 configuration setting check" definition_ref="sysctl_net_ipv6_conf_all_disable_ipv6_static" />
-        <extend_definition comment="net.ipv6.conf.all.disable_ipv6 runtime setting check" definition_ref="sysctl_net_ipv6_conf_all_disable_ipv6_runtime" />
+        <extend_definition comment="net.ipv6.conf.all.disable_ipv6 configuration setting check"
+          definition_ref="sysctl_net_ipv6_conf_all_disable_ipv6_static" />
+        <extend_definition comment="net.ipv6.conf.all.disable_ipv6 runtime setting check"
+          definition_ref="sysctl_net_ipv6_conf_all_disable_ipv6_runtime" />
       </criteria>
     </criteria>
   </definition>
diff --git a/ssg/constants.py b/ssg/constants.py
index 0dd3752b30..7ee814470f 100644
--- a/ssg/constants.py
+++ b/ssg/constants.py
@@ -240,6 +240,7 @@ FULL_NAME_TO_PRODUCT_MAPPING = {
     "SUSE Linux Enterprise 15": "sle15",
     "SUSE Linux Enterprise Micro 5": "slmicro5",
     "SUSE Linux Enterprise Micro 6": "slmicro6",
+    "openSUSE Leap Micro 6": "leapmicro6",
     "TencentOS Server 4": "tencentos4",
     "Ubuntu 22.04": "ubuntu2204",
     "Ubuntu 24.04": "ubuntu2404",
@@ -297,7 +298,7 @@ MULTI_PLATFORM_LIST = ["rhel", "fedora", "rhv", "debian", "ubuntu",
                        "openeuler", "kylinserver",
                        "opensuse", "sle", "tencentos", "ol", "ocp", "rhcos",
                        "example", "eks", "alinux", "anolis", "openembedded", "al",
-                       "slmicro", "almalinux"]
+                       "slmicro", "leapmicro", "almalinux"]
 
 MULTI_PLATFORM_MAPPING = {
     "multi_platform_alinux": ["alinux2", "alinux3"],
@@ -317,6 +318,7 @@ MULTI_PLATFORM_MAPPING = {
     "multi_platform_rhv": ["rhv4"],
     "multi_platform_sle": ["sle12", "sle15"],
     "multi_platform_slmicro": ["slmicro5", "slmicro6"],
+    "multi_platform_leapmicro": ["leapmicro6"],
     "multi_platform_tencentos": ["tencentos4"],
     "multi_platform_ubuntu": ["ubuntu2204", "ubuntu2404"],
     "multi_platform_openembedded": ["openembedded"],
@@ -443,6 +445,7 @@ MAKEFILE_ID_TO_PRODUCT_MAP = {
     'opensuse': 'openSUSE',
     'sle': 'SUSE Linux Enterprise',
     'slmicro': 'SUSE Linux Enterprise Micro',
+    'leapmicro': 'openSUSE Leap Micro',
     'tencentos': 'TencentOS Server',
     'example': 'Example',
     'ol': 'Oracle Linux',
-- 
2.43.0

openSUSE Build Service is sponsored by