ComplianceAsCode / ComplianceAsCode/content

ANSSI BP28 - R28 Misalignments in RHEL 9 Profile

Open
#12,289 1 comment 0 reactions 0 assignees View on GitHub
ANSSI RHEL9 triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

ANSSI BP28 - R28 Misalignments in RHEL 9 Profile

#### Details:

This content is not aligned with content from [CONFIGURATION RECOMMENDATIONS
OF A GNU/LINUX SYSTEM](https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf)

The misalignment affects these profiles:

- anssi_bp28_intermediary
- anssi_bp28_enhanced
- anssi_bp28_high

There are partitioning checks exclusions that shouldn't be excluded :

1. partition_for_opt
2. partition_for_boot
3. partition_for_usr

There are partitioning checks that should be excluded :

1. partition_for_var_log_audit

There are partitioning checks that should be created and included :

1. partition_for_proc

#### Outcome:

- [ ] This project's content can be improved:
- [x] Check needs to be improved.
- [ ] Remediation needs to be improved.
- [ ] The external content's check is faulty - the other party needs to be notified, they have work to do.

#### SCAP Security Guide Version:

0.1.75 - [Guide to the Secure Configuration of Red Hat Enterprise Linux 9](https://complianceascode.github.io/content-pages/guides/ssg-rhel9-guide-anssi_bp28_enhanced.html)

#### External Content's Version:

2 - [CONFIGURATION RECOMMENDATIONS
OF A GNU/LINUX SYSTEM](https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.