Merge pull request #11365 from marcusburghardt/anssi_url

Fix ANSSI URL in control file and update RHEL profiles
ComplianceAsCode · Dec 8, 2023 · c788dfe · c788dfe
2 parents c8bdaa4 + 09e5c68
commit c788dfe
Show file tree

Hide file tree

Showing 13 changed files with 61 additions and 4 deletions.
diff --git a/controls/anssi.yml b/controls/anssi.yml
@@ -2,7 +2,7 @@ policy: 'ANSSI-BP-028'
 title: 'Configuration Recommendations of a GNU/Linux System'
 id: anssi
 version: '2.0'
-source: https://www.ssi.gouv.fr/uploads/2019/02/linux_configuration-en-v2.pdf
+source: https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf
 levels:
   - id: minimal
   - id: intermediary

diff --git a/products/rhel7/profiles/anssi_nt28_enhanced.profile b/products/rhel7/profiles/anssi_nt28_enhanced.profile
@@ -1,5 +1,9 @@
 documentation_complete: true
 
+metadata:
+    SMEs:
+        - marcusburghardt
+
 title: 'ANSSI-BP-028 (enhanced)'
 
 description: |-
@@ -11,6 +15,9 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
     - anssi:all:enhanced
     - '!selinux_state'

diff --git a/products/rhel7/profiles/anssi_nt28_high.profile b/products/rhel7/profiles/anssi_nt28_high.profile
@@ -1,5 +1,9 @@
 documentation_complete: true
 
+metadata:
+    SMEs:
+        - marcusburghardt
+
 title: 'ANSSI-BP-028 (high)'
 
 description: |-
@@ -11,6 +15,9 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
     - anssi:all:high
     - '!timer_logrotate_enabled'
diff --git a/products/rhel7/profiles/anssi_nt28_intermediary.profile b/products/rhel7/profiles/anssi_nt28_intermediary.profile
@@ -1,6 +1,9 @@
-# Don't forget to enable build of tables in rhel7CMakeLists.txt when setting to true
 documentation_complete: true
 
+metadata:
+    SMEs:
+        - marcusburghardt
+
 title: 'ANSSI-BP-028 (intermediary)'
 
 description: |-
@@ -12,5 +15,8 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
     - anssi:all:intermediary
diff --git a/products/rhel7/profiles/anssi_nt28_minimal.profile b/products/rhel7/profiles/anssi_nt28_minimal.profile
@@ -1,5 +1,9 @@
 documentation_complete: true
 
+metadata:
+    SMEs:
+        - marcusburghardt
+
 title: 'ANSSI-BP-028 (minimal)'
 
 description: |-
@@ -11,5 +15,8 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
     - anssi:all:minimal
diff --git a/products/rhel8/profiles/anssi_bp28_enhanced.profile b/products/rhel8/profiles/anssi_bp28_enhanced.profile
@@ -2,6 +2,7 @@ documentation_complete: true
 
 metadata:
     SMEs:
+        - marcusburghardt
         - yuumasato
 
 title: 'ANSSI-BP-028 (enhanced)'
@@ -15,6 +16,9 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
     - anssi:all:enhanced
     - '!timer_logrotate_enabled'
diff --git a/products/rhel8/profiles/anssi_bp28_high.profile b/products/rhel8/profiles/anssi_bp28_high.profile
@@ -2,6 +2,7 @@ documentation_complete: true
 
 metadata:
     SMEs:
+        - marcusburghardt
         - yuumasato
 
 title: 'ANSSI-BP-028 (high)'
@@ -15,6 +16,9 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
     - anssi:all:high
     # the following rule renders UEFI systems unbootable

diff --git a/products/rhel8/profiles/anssi_bp28_intermediary.profile b/products/rhel8/profiles/anssi_bp28_intermediary.profile
@@ -2,6 +2,7 @@ documentation_complete: true
 
 metadata:
     SMEs:
+        - marcusburghardt
         - yuumasato
 
 title: 'ANSSI-BP-028 (intermediary)'
@@ -15,5 +16,8 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
   - anssi:all:intermediary
diff --git a/products/rhel8/profiles/anssi_bp28_minimal.profile b/products/rhel8/profiles/anssi_bp28_minimal.profile
@@ -2,6 +2,7 @@ documentation_complete: true
 
 metadata:
     SMEs:
+        - marcusburghardt
         - yuumasato
 
 title: 'ANSSI-BP-028 (minimal)'
@@ -15,6 +16,8 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
   - anssi:all:minimal
-
diff --git a/products/rhel9/profiles/anssi_bp28_enhanced.profile b/products/rhel9/profiles/anssi_bp28_enhanced.profile
@@ -2,6 +2,7 @@ documentation_complete: true
 
 metadata:
     SMEs:
+        - marcusburghardt
         - yuumasato
 
 title: 'ANSSI-BP-028 (enhanced)'
@@ -15,5 +16,8 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
     - anssi:all:enhanced
diff --git a/products/rhel9/profiles/anssi_bp28_high.profile b/products/rhel9/profiles/anssi_bp28_high.profile
@@ -2,6 +2,7 @@ documentation_complete: true
 
 metadata:
     SMEs:
+        - marcusburghardt
         - yuumasato
 
 title: 'ANSSI-BP-028 (high)'
@@ -15,6 +16,9 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
     - anssi:all:high
     # the following rule renders UEFI systems unbootable

diff --git a/products/rhel9/profiles/anssi_bp28_intermediary.profile b/products/rhel9/profiles/anssi_bp28_intermediary.profile
@@ -2,6 +2,7 @@ documentation_complete: true
 
 metadata:
     SMEs:
+        - marcusburghardt
         - yuumasato
 
 title: 'ANSSI-BP-028 (intermediary)'
@@ -15,5 +16,8 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
   - anssi:all:intermediary
diff --git a/products/rhel9/profiles/anssi_bp28_minimal.profile b/products/rhel9/profiles/anssi_bp28_minimal.profile
@@ -2,6 +2,7 @@ documentation_complete: true
 
 metadata:
     SMEs:
+        - marcusburghardt
         - yuumasato
 
 title: 'ANSSI-BP-028 (minimal)'
@@ -15,6 +16,8 @@ description: |-
     A copy of the ANSSI-BP-028 can be found at the ANSSI website:
     https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/
 
+    An English version of the ANSSI-BP-028 can also be found at the ANSSI website:
+    https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system
+
 selections:
   - anssi:all:minimal
-