Skip to content

Update ANSSI profile descriptions #6592

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vojtapolasek merged 5 commits into from
Feb 8, 2021
Merged

Update ANSSI profile descriptions #6592

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
e3dd773
Remove extends key from ANSSI intermediary profile
yuumasato Feb 3, 2021
48845db
Update title and descriptions of ANSSI profiles
yuumasato Feb 3, 2021
5ea9fe7
Add missing hyphen in ANSSI profiles descriptions
yuumasato Feb 3, 2021
c111061
Fix ANSSI document number for consistency
yuumasato Feb 5, 2021
c4b11df
Fix single quote in ANSSI name
yuumasato Feb 5, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion controls/anssi.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
policy: 'ANSSI-BP-028'
title: 'ANSSI-BP-028'
title: 'Configuration Recommendations of a GNU/Linux System'
id: anssi
version: '1.2'
source: https://www.ssi.gouv.fr/uploads/2019/03/linux_configuration-en-v1.2.pdf
Expand Down
12 changes: 9 additions & 3 deletions rhel7/profiles/anssi_nt28_enhanced.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,15 @@
documentation_complete: true

title: 'DRAFT - ANSSI DAT-BP28 (enhanced)'
title: 'ANSSI-BP-028 (enhanced)'

description: 'Draft profile for ANSSI compliance at the enhanced level. ANSSI stands for Agence nationale de la sécurité des
systèmes d''information. Based on https://www.ssi.gouv.fr/.'
description: |-
This profile contains configurations that align to ANSSI-BP-028 at the enhanced hardening level.

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

selections:
- anssi:all:enhanced
Expand Down
12 changes: 9 additions & 3 deletions rhel7/profiles/anssi_nt28_high.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,15 @@
documentation_complete: true

title: 'DRAFT - ANSSI DAT-BP28 (high)'
title: 'DRAFT - ANSSI-BP-028 (high)'

description: 'Draft profile for ANSSI compliance at the high level. ANSSI stands for Agence nationale de la sécurité des systèmes
d''information. Based on https://www.ssi.gouv.fr/.'
description: |-
This profile contains configurations that align to ANSSI-BP-028 at the high hardening level.

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

selections:
- anssi:all:high
14 changes: 10 additions & 4 deletions rhel7/profiles/anssi_nt28_intermediary.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,16 @@
# Don't forget to enable build of tables in rhel7CMakeLists.txt when setting to true
documentation_complete: true

title: 'DRAFT - ANSSI DAT-BP28 (intermediary)'
title: 'ANSSI-BP-028 (intermediary)'

description: 'Draft profile for ANSSI compliance at the intermediary level. ANSSI stands for Agence nationale de la sécurité
des systèmes d''information. Based on https://www.ssi.gouv.fr/.'
description: |-
This profile contains configurations that align to ANSSI-BP-028 at the intermediary hardening level.

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

selections:
- anssi:all:intermediary
- anssi:all:intermediary
14 changes: 10 additions & 4 deletions rhel7/profiles/anssi_nt28_minimal.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,15 @@
documentation_complete: true

title: 'DRAFT - ANSSI DAT-BP28 (minimal)'
title: 'ANSSI-BP-028 (minimal)'

description: 'Draft profile for ANSSI compliance at the minimal level. ANSSI stands for Agence nationale de la sécurité des
systèmes d''information. Based on https://www.ssi.gouv.fr/.'
description: |-
This profile contains configurations that align to ANSSI-BP-028 at the minimal hardening level.

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

selections:
- anssi:all:minimal
- anssi:all:minimal
14 changes: 9 additions & 5 deletions rhel8/profiles/anssi_bp28_enhanced.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,15 @@
documentation_complete: true

title: 'ANSSI BP-028 (enhanced)'
title: 'ANSSI-BP-028 (enhanced)'

description:
ANSSI BP-028 compliance at the enhanced level. ANSSI stands for
Agence nationale de la sécurité des systèmes d'information. Based on
https://www.ssi.gouv.fr/.
description: |-
This profile contains configurations that align to ANSSI-BP-028 at the enhanced hardening level.

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

selections:
- anssi:all:enhanced
Expand Down
14 changes: 9 additions & 5 deletions rhel8/profiles/anssi_bp28_high.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,15 @@
documentation_complete: true

title: 'ANSSI BP-028 (high)'
title: 'DRAFT - ANSSI-BP-028 (high)'

description:
ANSSI BP-028 compliance at the high level. ANSSI stands for
Agence nationale de la sécurité des systèmes d'information. Based on
https://www.ssi.gouv.fr/.
description: |-
This profile contains configurations that align to ANSSI-BP-028 at the high hardening level.

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

selections:
- anssi:all:high
14 changes: 8 additions & 6 deletions rhel8/profiles/anssi_bp28_intermediary.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,13 +1,15 @@
documentation_complete: true

title: 'ANSSI BP-028 (intermediary)'
title: 'ANSSI-BP-028 (intermediary)'

description:
ANSSI BP-028 compliance at the intermediary level. ANSSI stands for
Agence nationale de la sécurité des systèmes d''information. Based on
https://www.ssi.gouv.fr/.
description: |-
This profile contains configurations that align to ANSSI-BP-028 at the intermediary hardening level.

extends: anssi_bp28_minimal
ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

selections:
- anssi:all:intermediary
14 changes: 9 additions & 5 deletions rhel8/profiles/anssi_bp28_minimal.profile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,15 @@
documentation_complete: true

title: 'ANSSI BP-028 (minimal)'
title: 'ANSSI-BP-028 (minimal)'

description:
ANSSI BP-028 compliance at the minimal level. ANSSI stands for
Agence nationale de la sécurité des systèmes d'information. Based on
https://www.ssi.gouv.fr/.
description: |-
This profile contains configurations that align to ANSSI-BP-028 at the minimal hardening level.

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

selections:
- anssi:all:minimal
Expand Down