Skip to content

Fix RHEL 10 profile descriptions #14730

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jan-cerny wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Fix RHEL 10 profile descriptions #14730

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 1 addition & 2 deletions products/rhel10/profiles/anssi_bp28_enhanced.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,10 +9,9 @@
title: 'ANSSI-BP-028 (enhanced)'

description: |-
This is a draft profile for experimental purposes.
This draft profile contains configurations that align to ANSSI-BP-028 v2.0 at the enhanced hardening level.
This profile contains configurations that align to ANSSI-BP-028 v2.0 at the enhanced hardening level.

Check failure on line 12 in products/rhel10/profiles/anssi_bp28_enhanced.profile

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

12:100 [line-length] line too long (105 > 99 characters)

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.

Check failure on line 14 in products/rhel10/profiles/anssi_bp28_enhanced.profile

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

14:100 [line-length] line too long (136 > 99 characters)
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
Expand Down Expand Up @@ -79,7 +78,7 @@
# RHEL 10 uses a different rule for auditing changes to selinux configuration (R73)
- '!audit_rules_mac_modification'
- audit_rules_mac_modification_etc_selinux
# these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed

Check failure on line 81 in products/rhel10/profiles/anssi_bp28_enhanced.profile

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

81:100 [line-length] line too long (115 > 99 characters)
- '!accounts_password_pam_retry'
# These rules are being modified and they are causing trouble in their current state (R67)
- '!sssd_enable_pam_services'
Expand Down
3 changes: 1 addition & 2 deletions products/rhel10/profiles/anssi_bp28_high.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,10 +9,9 @@
title: 'ANSSI-BP-028 (high)'

description: |-
This is a draft profile for experimental purposes.
This draft profile contains configurations that align to ANSSI-BP-028 v2.0 at the high hardening level.
This profile contains configurations that align to ANSSI-BP-028 v2.0 at the high hardening level.

Check failure on line 12 in products/rhel10/profiles/anssi_bp28_high.profile

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

12:100 [line-length] line too long (101 > 99 characters)

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.

Check failure on line 14 in products/rhel10/profiles/anssi_bp28_high.profile

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

14:100 [line-length] line too long (136 > 99 characters)
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
Expand Down Expand Up @@ -83,7 +82,7 @@
# RHEL 10 uses a different rule for auditing changes to selinux configuration (R73)
- '!audit_rules_mac_modification'
- audit_rules_mac_modification_etc_selinux
# these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed

Check failure on line 85 in products/rhel10/profiles/anssi_bp28_high.profile

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

85:100 [line-length] line too long (115 > 99 characters)
- '!accounts_password_pam_retry'
# These rules are being modified and they are causing trouble in their current state (R67)
- '!sssd_enable_pam_services'
Expand Down
3 changes: 1 addition & 2 deletions products/rhel10/profiles/anssi_bp28_intermediary.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,10 +9,9 @@
title: 'ANSSI-BP-028 (intermediary)'

description: |-
This is a draft profile for experimental purposes.
This draft profile contains configurations that align to ANSSI-BP-028 v2.0 at the intermediary hardening level.
This profile contains configurations that align to ANSSI-BP-028 v2.0 at the intermediary hardening level.

Check failure on line 12 in products/rhel10/profiles/anssi_bp28_intermediary.profile

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

12:100 [line-length] line too long (109 > 99 characters)

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.

Check failure on line 14 in products/rhel10/profiles/anssi_bp28_intermediary.profile

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

14:100 [line-length] line too long (136 > 99 characters)
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
Expand Down Expand Up @@ -55,7 +54,7 @@
- '!package_xinetd_removed'
- '!package_ypbind_removed'
- '!package_ypserv_removed'
# these rules are failing when they are remediated with Ansible, removing them temporarily until they are fixed

Check failure on line 57 in products/rhel10/profiles/anssi_bp28_intermediary.profile

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

57:100 [line-length] line too long (115 > 99 characters)
- '!accounts_password_pam_retry'
# These rules are being modified and they are causing trouble in their current state (R67)
- '!sssd_enable_pam_services'
Expand Down
3 changes: 1 addition & 2 deletions products/rhel10/profiles/anssi_bp28_minimal.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,7 @@
title: 'ANSSI-BP-028 (minimal)'

description: |-
This is a draft profile for experimental purposes.
This draft profile contains configurations that align to ANSSI-BP-028 v2.0 at the minimal hardening level.
This profile contains configurations that align to ANSSI-BP-028 v2.0 at the minimal hardening level.

Check failure on line 12 in products/rhel10/profiles/anssi_bp28_minimal.profile

View workflow job for this annotation

GitHub Actions / Yaml Lint on Changed yaml files 

12:100 [line-length] line too long (104 > 99 characters)

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.
Expand Down
4 changes: 1 addition & 3 deletions products/rhel10/profiles/e8.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,9 +11,7 @@ reference: https://www.cyber.gov.au/acsc/view-all-content/publications/hardening
title: 'Australian Cyber Security Centre (ACSC) Essential Eight'

description: |-
This is a draft profile for experimental purposes.

This draft profile contains configuration checks for Red Hat Enterprise Linux 10
This profile contains configuration checks for Red Hat Enterprise Linux 10
that align to the Australian Cyber Security Centre (ACSC) Essential Eight.

A copy of the Essential Eight in Linux Environments guide can be found at the
Expand Down
4 changes: 1 addition & 3 deletions products/rhel10/profiles/hipaa.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,16 +10,14 @@ reference: https://www.hhs.gov/hipaa/for-professionals/index.html
title: 'Health Insurance Portability and Accountability Act (HIPAA)'

description: |-
This is a draft profile for experimental purposes.

The HIPAA Security Rule establishes U.S. national standards to protect individuals's
electronic personal health information that is created, received, used, or
maintained by a covered entity. The Security Rule requires appropriate
administrative, physical and technical safeguards to ensure the
confidentiality, integrity, and security of electronic protected health
information.

This draft profile configures Red Hat Enterprise Linux 10 to the HIPAA Security
This profile configures Red Hat Enterprise Linux 10 to the HIPAA Security
Rule identified for securing of electronic protected health information.
Use of this profile in no way guarantees or makes claims against legal compliance against the HIPAA Security Rule(s).

Expand Down
2 changes: 1 addition & 1 deletion products/rhel10/profiles/ism_o.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ reference: https://www.cyber.gov.au/ism
title: 'Australian Cyber Security Centre (ACSC) ISM Official - Base'

description: |-
This draft profile contains configuration checks for Red Hat Enterprise Linux 10
This profile contains configuration checks for Red Hat Enterprise Linux 10
that align to the Australian Cyber Security Centre (ACSC) Information Security Manual (ISM).

The ISM uses a risk-based approach to cyber security. This profile provides a guide to aligning
Expand Down
4 changes: 1 addition & 3 deletions products/rhel10/profiles/ism_o_secret.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,9 +14,7 @@ reference: https://www.cyber.gov.au/ism
title: 'Australian Cyber Security Centre (ACSC) ISM Official - Secret'

description: |-
This is a draft profile for experimental purposes.

This draft profile contains configuration checks for Red Hat Enterprise Linux 10
This profile contains configuration checks for Red Hat Enterprise Linux 10
that align to the Australian Cyber Security Centre (ACSC) Information Security Manual (ISM).

The ISM uses a risk-based approach to cyber security. This profile provides a guide to aligning
Expand Down
2 changes: 1 addition & 1 deletion products/rhel10/profiles/ism_o_top_secret.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ reference: https://www.cyber.gov.au/ism
title: 'Australian Cyber Security Centre (ACSC) ISM Official - Top Secret'

description: |-
This draft profile contains configuration checks for Red Hat Enterprise Linux 10
This profile contains configuration checks for Red Hat Enterprise Linux 10
that align to the Australian Cyber Security Centre (ACSC) Information Security Manual (ISM).

The ISM uses a risk-based approach to cyber security. This profile provides a guide to aligning
Expand Down
2 changes: 1 addition & 1 deletion products/rhel10/profiles/ospp.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ reference: https://www.niap-ccevs.org/Profile/Info.cfm?PPID=469&id=469
title: 'DRAFT - Protection Profile for General Purpose Operating Systems'

description: |-
This is draft profile is based on the Red Hat Enterprise Linux 9 Common Criteria Guidance as
This draft profile is based on the Red Hat Enterprise Linux 9 Common Criteria Guidance as
guidance for Red Hat Enterprise Linux 10 was not available at the time of release.

Where appropriate, CNSSI 1253 or DoD-specific values are used for
Expand Down
4 changes: 1 addition & 3 deletions products/rhel10/profiles/pci-dss.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,14 +13,12 @@ reference: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-
title: 'PCI-DSS v4.0.1 Control Baseline for Red Hat Enterprise Linux 10'

description: |-
This is a draft profile for experimental purposes.

Payment Card Industry - Data Security Standard (PCI-DSS) is a set of
security standards designed to ensure the secure handling of payment card
data, with the goal of preventing data breaches and protecting sensitive
financial information.

This draft profile ensures Red Hat Enterprise Linux 10 is configured in alignment
This profile ensures Red Hat Enterprise Linux 10 is configured in alignment
with PCI-DSS v4.0.1 requirements.

selections:
Expand Down
Loading