|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/anssi_nt28_minimal.profile scap-security-guide-0.1.46/rhel7/profiles/anssi_nt28_minimal.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/anssi_nt28_minimal.profile 2019-08-28 12:35:00.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/anssi_nt28_minimal.profile 2020-04-02 00:12:34.138435758 +0000
|
|
|
c957b4 |
@@ -2,7 +2,8 @@ documentation_complete: true
|
|
|
c957b4 |
|
|
|
c957b4 |
title: 'DRAFT - ANSSI DAT-NT28 (minimal)'
|
|
|
c957b4 |
|
|
|
c957b4 |
-description: 'Draft profile for ANSSI compliance at the minimal level. ANSSI stands for Agence nationale de la sécurité des
|
|
|
c957b4 |
+description: ' **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+ Draft profile for ANSSI compliance at the minimal level. ANSSI stands for Agence nationale de la sécurité des
|
|
|
c957b4 |
systèmes d''information. Based on https://www.ssi.gouv.fr/.'
|
|
|
c957b4 |
|
|
|
c957b4 |
selections:
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/C2S-docker.profile scap-security-guide-0.1.46/rhel7/profiles/C2S-docker.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/C2S-docker.profile 2019-08-28 12:35:00.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/C2S-docker.profile 2020-04-02 00:13:40.055578160 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: false
|
|
|
c957b4 |
title: 'DRAFT - C2S for Docker'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This profile demonstrates compliance against the
|
|
|
c957b4 |
U.S. Government Commercial Cloud Services (C2S) baseline.
|
|
|
c957b4 |
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/C2S.profile scap-security-guide-0.1.46/rhel7/profiles/C2S.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/C2S.profile 2019-08-28 13:46:33.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/C2S.profile 2020-04-02 00:13:14.710523405 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'C2S for Red Hat Enterprise Linux 7'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This profile demonstrates compliance against the
|
|
|
c957b4 |
U.S. Government Commercial Cloud Services (C2S) baseline.
|
|
|
c957b4 |
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/cjis.profile scap-security-guide-0.1.46/rhel7/profiles/cjis.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/cjis.profile 2019-08-28 13:46:33.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/cjis.profile 2020-04-02 00:14:09.815642451 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'Criminal Justice Information Services (CJIS) Security Policy'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This profile is derived from FBI's CJIS v5.4
|
|
|
c957b4 |
Security Policy. A copy of this policy can be found at the CJIS Security
|
|
|
c957b4 |
Policy Resource Center:
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/cui.profile scap-security-guide-0.1.46/rhel7/profiles/cui.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/cui.profile 2019-08-28 12:35:00.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/cui.profile 2020-04-02 00:14:39.735707092 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
From NIST 800-171, Section 2.2:
|
|
|
c957b4 |
Security requirements for protecting the confidentiality of CUI in non-federal
|
|
|
c957b4 |
information systems and organizations have a well-defined structure that
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/docker-host.profile scap-security-guide-0.1.46/rhel7/profiles/docker-host.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/docker-host.profile 2019-08-28 12:35:00.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/docker-host.profile 2020-04-02 00:15:08.697769654 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: false
|
|
|
c957b4 |
title: 'DRAFT - Standard Docker Host Security Profile'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This profile contains rules to ensure standard security
|
|
|
c957b4 |
baseline of Red Hat Enterprise Linux 7 system running docker.
|
|
|
c957b4 |
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/e8.profile scap-security-guide-0.1.46/rhel7/profiles/e8.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/e8.profile 2020-04-02 00:07:38.530797155 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/e8.profile 2020-04-02 00:15:34.521825440 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'Australian Cyber Security Centre (ACSC) Essential Eight'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This profile contains configuration checks for Red Hat Enterprise Linux 7
|
|
|
c957b4 |
that align to the Australian Cyber Security Centre (ACSC) Essential Eight.
|
|
|
c957b4 |
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/hipaa.profile scap-security-guide-0.1.46/rhel7/profiles/hipaa.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/hipaa.profile 2019-08-28 13:46:33.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/hipaa.profile 2020-04-02 00:16:12.605907713 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: True
|
|
|
c957b4 |
title: 'Health Insurance Portability and Accountability Act (HIPAA)'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
The HIPAA Security Rule establishes U.S. national standards to protect individuals’
|
|
|
c957b4 |
electronic personal health information that is created, received, used, or
|
|
|
c957b4 |
maintained by a covered entity. The Security Rule requires appropriate
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/http-stig.profile scap-security-guide-0.1.46/rhel7/profiles/http-stig.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/http-stig.profile 2019-08-28 12:35:00.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/http-stig.profile 2020-04-02 00:16:43.191973788 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: false
|
|
|
c957b4 |
title: 'DRAFT - DISA STIG for Apache HTTP on Red Hat Enterprise Linux 7'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This profile contains configuration checks that align to the
|
|
|
c957b4 |
DISA STIG for Apache HTTP web server.
|
|
|
c957b4 |
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/ipa-stig.profile scap-security-guide-0.1.46/rhel7/profiles/ipa-stig.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/ipa-stig.profile 2019-08-28 12:35:00.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/ipa-stig.profile 2020-04-02 00:17:03.371017390 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: false
|
|
|
c957b4 |
title: 'DRAFT - DISA STIG for Red Hat IdM'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This is a *draft* profile for STIG. This profile is being
|
|
|
c957b4 |
developed under the DoD consensus model to become a STIG in
|
|
|
c957b4 |
coordination with DISA FSO.
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/ncp.profile scap-security-guide-0.1.46/rhel7/profiles/ncp.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/ncp.profile 2019-08-28 13:46:33.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/ncp.profile 2020-04-02 00:19:00.198269763 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'NIST National Checklist Program Security Guide'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This compliance profile reflects the core set of security
|
|
|
c957b4 |
related configuration settings for deployment of Red Hat Enterprise
|
|
|
c957b4 |
Linux 7.x into U.S. Defense, Intelligence, and Civilian agencies.
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/ospp.profile scap-security-guide-0.1.46/rhel7/profiles/ospp.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/ospp.profile 2020-04-02 00:07:38.523797140 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/ospp.profile 2020-04-02 00:18:53.448255187 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'OSPP - Protection Profile for General Purpose Operating Systems v4.2.1'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This profile reflects mandatory configuration controls identified in the
|
|
|
c957b4 |
NIAP Configuration Annex to the Protection Profile for General Purpose
|
|
|
c957b4 |
Operating Systems (Protection Profile Version 4.2.1).
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/pci-dss.profile scap-security-guide-0.1.46/rhel7/profiles/pci-dss.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/pci-dss.profile 2019-08-28 12:35:00.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/pci-dss.profile 2020-04-02 00:19:22.109317098 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 7'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
Ensures PCI-DSS v3.2.1 security configuration settings are applied.
|
|
|
c957b4 |
|
|
|
c957b4 |
selections:
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/rhelh-stig.profile scap-security-guide-0.1.46/rhel7/profiles/rhelh-stig.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/rhelh-stig.profile 2019-08-28 13:46:33.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/rhelh-stig.profile 2020-04-02 00:20:04.168407959 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: '[DRAFT] DISA STIG for Red Hat Enterprise Linux Virtualization Host (RHELH)'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This *draft* profile contains configuration checks that align to the
|
|
|
c957b4 |
DISA STIG for Red Hat Enterprise Linux Virtualization Host (RHELH).
|
|
|
c957b4 |
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/rhelh-vpp.profile scap-security-guide-0.1.46/rhel7/profiles/rhelh-vpp.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/rhelh-vpp.profile 2019-08-28 13:46:33.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/rhelh-vpp.profile 2020-04-02 00:18:01.448142852 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'VPP - Protection Profile for Virtualization v. 1.0 for Red Hat Enterprise Linux Hypervisor (RHELH)'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This compliance profile reflects the core set of security
|
|
|
c957b4 |
related configuration settings for deployment of Red Hat Enterprise
|
|
|
c957b4 |
Linux Hypervisor (RHELH) 7.x into U.S. Defense, Intelligence, and Civilian agencies.
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/rht-ccp.profile scap-security-guide-0.1.46/rhel7/profiles/rht-ccp.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/rht-ccp.profile 2019-08-28 13:46:33.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/rht-ccp.profile 2020-04-02 00:20:25.205453406 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'Red Hat Corporate Profile for Certified Cloud Providers (RH CCP)'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This profile contains the minimum security relevant
|
|
|
c957b4 |
configuration settings recommended by Red Hat, Inc for
|
|
|
c957b4 |
Red Hat Enterprise Linux 7 instances deployed by Red Hat Certified
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/satellite-stig.profile scap-security-guide-0.1.46/rhel7/profiles/satellite-stig.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/satellite-stig.profile 2019-08-28 12:35:00.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/satellite-stig.profile 2020-04-02 00:20:44.967496099 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: false
|
|
|
c957b4 |
title: 'DRAFT - DISA STIG for Red Hat Satellite'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This is a *draft* profile for STIG. This profile is being
|
|
|
c957b4 |
developed under the DoD consensus model to become a STIG in
|
|
|
c957b4 |
coordination with DISA FSO.
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/standard.profile scap-security-guide-0.1.46/rhel7/profiles/standard.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/standard.profile 2019-08-28 12:35:00.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/standard.profile 2020-04-02 00:21:05.637540751 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'Standard System Security Profile for Red Hat Enterprise Linux 7'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This profile contains rules to ensure standard security baseline
|
|
|
c957b4 |
of a Red Hat Enterprise Linux 7 system. Regardless of your system's workload
|
|
|
c957b4 |
all of these checks should pass.
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/stig.profile scap-security-guide-0.1.46/rhel7/profiles/stig.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/stig.profile 2019-08-28 13:46:33.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/stig.profile 2020-04-02 00:21:23.477579298 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: true
|
|
|
c957b4 |
title: 'DISA STIG for Red Hat Enterprise Linux 7'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This profile contains configuration checks that align to the
|
|
|
c957b4 |
DISA STIG for Red Hat Enterprise Linux V1R4.
|
|
|
c957b4 |
|
|
|
c957b4 |
diff -uNrp scap-security-guide-0.1.46.orig/rhel7/profiles/tower-stig.profile scap-security-guide-0.1.46/rhel7/profiles/tower-stig.profile
|
|
|
c957b4 |
--- scap-security-guide-0.1.46.orig/rhel7/profiles/tower-stig.profile 2019-08-28 12:35:00.000000000 +0000
|
|
|
c957b4 |
+++ scap-security-guide-0.1.46/rhel7/profiles/tower-stig.profile 2020-04-02 00:21:44.885625545 +0000
|
|
|
c957b4 |
@@ -3,6 +3,8 @@ documentation_complete: false
|
|
|
c957b4 |
title: 'DRAFT - DISA STIG for Red Hat Ansible Tower'
|
|
|
c957b4 |
|
|
|
c957b4 |
description: |-
|
|
|
c957b4 |
+ **Not applicable to CentOS Linux, included for reference only**
|
|
|
c957b4 |
+
|
|
|
c957b4 |
This is a *draft* profile for STIG. This profile is being
|
|
|
c957b4 |
developed under the DoD consensus model to become a STIG in
|
|
|
c957b4 |
coordination with DISA FSO.
|