Bug 2045341

.SCAP Security Guide profiles supported in RHEL 9.0 With the SCAP Security Guide compliance profiles included in RHEL 9.0, you can harden the system to the recommendations from the issuing organizations. As a result, you can configure and automate compliance of your RHEL 9 systems according to your required hardening level by using the associated remediations and SCAP profiles. [options="header"] |==== |Profile name|Profile ID|Policy version |French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level|`xccdf_org.ssgproject.content_profile_**anssi_bp28_enhanced**`|1.2 |French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level|`xccdf_org.ssgproject.content_profile_**anssi_bp28_high**`|1.2 |French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level|`xccdf_org.ssgproject.content_profile_**anssi_bp28_intermediary**`|1.2 |French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level|`xccdf_org.ssgproject.content_profile_**anssi_bp28_minimal**`|1.2 |[DRAFT] CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server|`xccdf_org.ssgproject.content_profile_**cis**`|DRAFTfootnoteref:[cis,CIS has not yet published an official benchmark for {ProductShortName} 9] |[DRAFT] CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Server|`xccdf_org.ssgproject.content_profile_**cis_server_l1**`|DRAFTfootnoteref:[cis] |[DRAFT] CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Workstation|`xccdf_org.ssgproject.content_profile_**cis_workstation_l1**`|DRAFTfootnoteref:[cis] |[DRAFT] CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Workstation|`xccdf_org.ssgproject.content_profile_**cis_workstation_l2**`|DRAFTfootnoteref:[cis] |[DRAFT] Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171)|`xccdf_org.ssgproject.content_profile_**cui**`|r2 |Australian Cyber Security Centre (ACSC) Essential Eight|`xccdf_org.ssgproject.content_profile_**e8**`|not versioned |Health Insurance Portability and Accountability Act (HIPAA)|`xccdf_org.ssgproject.content_profile_**hipaa**`|not versioned |Australian Cyber Security Centre (ACSC) ISM Official|`xccdf_org.ssgproject.content_profile_**ism_o**`|not versioned |[DRAFT] Protection Profile for General Purpose Operating Systems|`xccdf_org.ssgproject.content_profile_**ospp**`|4.2.1 |PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 9|`xccdf_org.ssgproject.content_profile_**pci-dss**`|3.2.1 |[DRAFT] DISA STIG for Red Hat Enterprise Linux 9|`xccdf_org.ssgproject.content_profile_**stig**`|DRAFTfootnoteref:[stig,DISA has not yet published an official benchmark for {ProductShortName} 9] |[DRAFT] DISA STIG with GUI for Red Hat Enterprise Linux 9|`xccdf_org.ssgproject.content_profile_**stig_gui**`|DRAFTfootnoteref:[stig] |==== WARNING: Automatic remediation might render the system non-functional. Run the remediation in a test environment first.