Skip to content

Commit

Permalink
Update comments in OL9 ISM profile
Browse files Browse the repository at this point in the history
Signed-off-by: Edgar Aguilar <[email protected]>
  • Loading branch information
Xeicker committed Aug 27, 2024
1 parent 93b1278 commit 8414c0a
Showing 1 changed file with 17 additions and 9 deletions.
26 changes: 17 additions & 9 deletions products/ol9/profiles/ism_o.profile
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ documentation_complete: true

reference: https://www.cyber.gov.au/ism

title: 'Australian Cyber Security Centre (ACSC) ISM Official - Top Secret'
title: 'Australian Cyber Security Centre (ACSC) ISM Official'

description: |-
This profile contains configuration checks for Oracle Linux 9
Expand All @@ -21,37 +21,45 @@ extends: e8
selections:
- ism_o:all:top_secret

# Setting any nondefault, so it is safer to spot an issue
# Setting any nondefault, so a specific driver is expected
# using the same as in STIG
- var_smartcard_drivers=cac

# Rule is for authconfig not used in OL9
# ISM 0418,1055,1402
# Rule is for authconfig not used in
- "!enable_ldap_client"
# Not applicable to OL9 due to krb5-server version
- "!kerberos_disable_no_keytab"

# ISM 1386
# Configuration not available in OL9
- "!force_opensc_card_drivers"

# Not applicable to OL9 due to krb5-server version
- "!kerberos_disable_no_keytab"

# Doesn't seem applicable to OL9 as per openssl man page
# ISM 1277,1552
# Not applicable to OL9 as per openssl man page
- "!openssl_use_strong_entropy"

# ISM 0988,1405
# Always use chronyd
- "!service_chronyd_or_ntpd_enabled"

# pam_tally2 not available in OL9
# ISM 0421,0422,0431,0974,1173,1401,1504,1505,1546,1557,1558,1559,1560,1561
# pam_tally2 is not available in OL9
- "!accounts_passwords_pam_tally2_deny_root"
- "!accounts_passwords_pam_tally2_unlock_time"

# ISM 0582,0846
# This divition of rules is not implemented in OL9
- "!audit_access_failed_aarch64"
- "!audit_access_failed_ppc64le"
- "!audit_access_success_aarch64"
- "!audit_access_success_ppc64le"

# Doesn't seem to cover the expected requirement
# Doesn't cover the expected requirement
# 1319 "Static addressing is not used..."
- "!network_ipv6_static_address"

# ISM 1467,1483,1493
# Packages not available in OL
- "!package_libdnf-plugin-subscription-manager_installed"
- "!package_subscription-manager_installed"

0 comments on commit 8414c0a

Please sign in to comment.