diff --git a/controls/anssi.yml b/controls/anssi.yml index c1012353c8e..665fd4073ca 100644 --- a/controls/anssi.yml +++ b/controls/anssi.yml @@ -2,7 +2,7 @@ policy: 'ANSSI-BP-028' title: 'Configuration Recommendations of a GNU/Linux System' id: anssi version: '2.0' -source: https://www.ssi.gouv.fr/uploads/2019/02/linux_configuration-en-v2.pdf +source: https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf levels: - id: minimal - id: intermediary diff --git a/products/rhel7/profiles/anssi_nt28_enhanced.profile b/products/rhel7/profiles/anssi_nt28_enhanced.profile index ad2f5a84458..7469a54d085 100644 --- a/products/rhel7/profiles/anssi_nt28_enhanced.profile +++ b/products/rhel7/profiles/anssi_nt28_enhanced.profile @@ -1,5 +1,9 @@ documentation_complete: true +metadata: + SMEs: + - marcusburghardt + title: 'ANSSI-BP-028 (enhanced)' description: |- @@ -11,6 +15,9 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:enhanced - '!selinux_state' diff --git a/products/rhel7/profiles/anssi_nt28_high.profile b/products/rhel7/profiles/anssi_nt28_high.profile index 57589569372..1ef96764788 100644 --- a/products/rhel7/profiles/anssi_nt28_high.profile +++ b/products/rhel7/profiles/anssi_nt28_high.profile @@ -1,5 +1,9 @@ documentation_complete: true +metadata: + SMEs: + - marcusburghardt + title: 'ANSSI-BP-028 (high)' description: |- @@ -11,6 +15,9 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:high - '!timer_logrotate_enabled' diff --git a/products/rhel7/profiles/anssi_nt28_intermediary.profile b/products/rhel7/profiles/anssi_nt28_intermediary.profile index afa5e599740..c2b0252227f 100644 --- a/products/rhel7/profiles/anssi_nt28_intermediary.profile +++ b/products/rhel7/profiles/anssi_nt28_intermediary.profile @@ -1,6 +1,9 @@ -# Don't forget to enable build of tables in rhel7CMakeLists.txt when setting to true documentation_complete: true +metadata: + SMEs: + - marcusburghardt + title: 'ANSSI-BP-028 (intermediary)' description: |- @@ -12,5 +15,8 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:intermediary diff --git a/products/rhel7/profiles/anssi_nt28_minimal.profile b/products/rhel7/profiles/anssi_nt28_minimal.profile index 0cabc24a232..f0ac22d845d 100644 --- a/products/rhel7/profiles/anssi_nt28_minimal.profile +++ b/products/rhel7/profiles/anssi_nt28_minimal.profile @@ -1,5 +1,9 @@ documentation_complete: true +metadata: + SMEs: + - marcusburghardt + title: 'ANSSI-BP-028 (minimal)' description: |- @@ -11,5 +15,8 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:minimal diff --git a/products/rhel8/profiles/anssi_bp28_enhanced.profile b/products/rhel8/profiles/anssi_bp28_enhanced.profile index 7ab0f85897b..0a3b129833d 100644 --- a/products/rhel8/profiles/anssi_bp28_enhanced.profile +++ b/products/rhel8/profiles/anssi_bp28_enhanced.profile @@ -2,6 +2,7 @@ documentation_complete: true metadata: SMEs: + - marcusburghardt - yuumasato title: 'ANSSI-BP-028 (enhanced)' @@ -15,6 +16,9 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:enhanced - '!timer_logrotate_enabled' diff --git a/products/rhel8/profiles/anssi_bp28_high.profile b/products/rhel8/profiles/anssi_bp28_high.profile index 5375615a455..c6ffd314be0 100644 --- a/products/rhel8/profiles/anssi_bp28_high.profile +++ b/products/rhel8/profiles/anssi_bp28_high.profile @@ -2,6 +2,7 @@ documentation_complete: true metadata: SMEs: + - marcusburghardt - yuumasato title: 'ANSSI-BP-028 (high)' @@ -15,6 +16,9 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:high # the following rule renders UEFI systems unbootable diff --git a/products/rhel8/profiles/anssi_bp28_intermediary.profile b/products/rhel8/profiles/anssi_bp28_intermediary.profile index 81b6846681f..cf03d578c69 100644 --- a/products/rhel8/profiles/anssi_bp28_intermediary.profile +++ b/products/rhel8/profiles/anssi_bp28_intermediary.profile @@ -2,6 +2,7 @@ documentation_complete: true metadata: SMEs: + - marcusburghardt - yuumasato title: 'ANSSI-BP-028 (intermediary)' @@ -15,5 +16,8 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:intermediary diff --git a/products/rhel8/profiles/anssi_bp28_minimal.profile b/products/rhel8/profiles/anssi_bp28_minimal.profile index 79a63fd4341..16fa13b4b46 100644 --- a/products/rhel8/profiles/anssi_bp28_minimal.profile +++ b/products/rhel8/profiles/anssi_bp28_minimal.profile @@ -2,6 +2,7 @@ documentation_complete: true metadata: SMEs: + - marcusburghardt - yuumasato title: 'ANSSI-BP-028 (minimal)' @@ -15,6 +16,8 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:minimal - diff --git a/products/rhel9/profiles/anssi_bp28_enhanced.profile b/products/rhel9/profiles/anssi_bp28_enhanced.profile index 62cbe1715b0..706c8f95bc4 100644 --- a/products/rhel9/profiles/anssi_bp28_enhanced.profile +++ b/products/rhel9/profiles/anssi_bp28_enhanced.profile @@ -2,6 +2,7 @@ documentation_complete: true metadata: SMEs: + - marcusburghardt - yuumasato title: 'ANSSI-BP-028 (enhanced)' @@ -15,5 +16,8 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:enhanced diff --git a/products/rhel9/profiles/anssi_bp28_high.profile b/products/rhel9/profiles/anssi_bp28_high.profile index 204e141b1f5..a24dc768c8b 100644 --- a/products/rhel9/profiles/anssi_bp28_high.profile +++ b/products/rhel9/profiles/anssi_bp28_high.profile @@ -2,6 +2,7 @@ documentation_complete: true metadata: SMEs: + - marcusburghardt - yuumasato title: 'ANSSI-BP-028 (high)' @@ -15,6 +16,9 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:high # the following rule renders UEFI systems unbootable diff --git a/products/rhel9/profiles/anssi_bp28_intermediary.profile b/products/rhel9/profiles/anssi_bp28_intermediary.profile index 81b6846681f..cf03d578c69 100644 --- a/products/rhel9/profiles/anssi_bp28_intermediary.profile +++ b/products/rhel9/profiles/anssi_bp28_intermediary.profile @@ -2,6 +2,7 @@ documentation_complete: true metadata: SMEs: + - marcusburghardt - yuumasato title: 'ANSSI-BP-028 (intermediary)' @@ -15,5 +16,8 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:intermediary diff --git a/products/rhel9/profiles/anssi_bp28_minimal.profile b/products/rhel9/profiles/anssi_bp28_minimal.profile index 79a63fd4341..16fa13b4b46 100644 --- a/products/rhel9/profiles/anssi_bp28_minimal.profile +++ b/products/rhel9/profiles/anssi_bp28_minimal.profile @@ -2,6 +2,7 @@ documentation_complete: true metadata: SMEs: + - marcusburghardt - yuumasato title: 'ANSSI-BP-028 (minimal)' @@ -15,6 +16,8 @@ description: |- A copy of the ANSSI-BP-028 can be found at the ANSSI website: https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ + An English version of the ANSSI-BP-028 can also be found at the ANSSI website: + https://cyber.gouv.fr/publications/configuration-recommendations-gnulinux-system + selections: - anssi:all:minimal -