Bug 1953787
| Summary: | Insights does not use latest benchmark for CIS compliance | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Nikhil Gupta <ngupta> |
| Component: | scap-security-guide | Assignee: | Vojtech Polasek <vpolasek> |
| Status: | CLOSED ERRATA | QA Contact: | Milan Lysonek <mlysonek> |
| Severity: | medium | Docs Contact: | |
| Priority: | high | ||
| Version: | 7.9 | CC: | bwelterl, ggasparb, jafiala, jhanley, jreznik, mgoyal, mhaicman, mlysonek, ramesh.daryani, rmetrich, sthirugn, tlestach, vmugicag, vpolasek, wsato |
| Target Milestone: | rc | Keywords: | AutoVerified, Triaged, ZStream |
| Target Release: | --- | Flags: | pm-rhel:
mirror+
|
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | scap-security-guide-0.1.57-1.el7_9 | Doc Type: | Enhancement |
| Doc Text: |
.Update of CIS profiles in SCAP Security Guide
Three new compliance profiles aligned with the Center for Internet Security (CIS) Red Hat Enterprise Linux 7 Benchmark have been introduced to the SCAP Security Guide. All profiles are aligned with the version 3.1.1 of the benchmark. This is a substantial update over the previous version which was aligned with the CIS benchmark version 2.2.0.
The CIS RHEL 7 Benchmark provides different configuration recommendations for "Server" and "Workstation" deployments, and defines two levels of configuration, "level 1" and "level 2" for each deployment. The CIS profile previously shipped in RHEL7 represented only the "Server Level 2". The three new profiles complete the scope of the CIS RHEL 7 Benchmark profiles, and you can now more easily evaluate your system against CIS recommendations.
All currently available CIS RHEL 7 profiles are:
[horizontal]
Workstation Level 1:: `xccdf_org.ssgproject.content_profile_cis_workstation_l1`
Workstation Level 2:: `xccdf_org.ssgproject.content_profile_cis_workstation_l2`
Server Level 1:: `xccdf_org.ssgproject.content_profile_cis_server_l1`
Server Level 2:: `xccdf_org.ssgproject.content_profile_cis`
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-11-23 17:14:34 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||