Bug 2155790

Summary: Update ANSSI BP-028 in RHEL9 to v2.0
Product: Red Hat Enterprise Linux 9 Reporter: Watson Yuuma Sato <wsato>
Component: scap-security-guideAssignee: Vojtech Polasek <vpolasek>
Status: CLOSED ERRATA QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: unspecified Docs Contact: Jan Fiala <jafiala>
Priority: unspecified    
Version: 9.1CC: ggasparb, jafiala, jcerny, jjaburek, mhaicman, mlysonek, openscap-maint, vpolasek
Target Milestone: rcKeywords: AutoVerified, Triaged, ZStream
Target Release: ---Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: scap-security-guide-0.1.69-1.el9 Doc Type: Enhancement
Doc Text:
.ANSSI-BP-028 security profiles updated to version 2.0 The following French National Agency for the Security of Information Systems (ANSSI) BP-028 in the SCAP Security Guide were updated to be aligned with version 2.0: * ANSSI-BP-028 Minimal Level * ANSSI-BP-028 Intermediary Level * ANSSI-BP-028 Enhanced Level * ANSSI-BP-028 High Level
Story Points: ---
Clone Of:
: 2228431 2228432 (view as bug list) Environment:
Last Closed: 2023-11-07 08:37:02 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2228431, 2228432    

Description Watson Yuuma Sato 2022-12-22 11:44:17 UTC
Description of problem:

Version 2.0 of the policy ANSSI BP-028 is available.
RHEL9's ANSSI BP-028 profiles are aligned with version 1.2.

Expected results:
ANSSI profiles in RHEL9 are aligned to the new version of the policy

Additional info:
https://www.ssi.gouv.fr/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

Comment 2 Jan Černý 2023-06-14 15:27:23 UTC
https://github.com/ComplianceAsCode/content/pull/10334/ has been merged upstream

Comment 20 errata-xmlrpc 2023-11-07 08:37:02 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (scap-security-guide bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:6552