Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 26 additions & 0 deletions products/sle15/profiles/anssi_bp28_intermediary.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
documentation_complete: true

metadata:
SMEs:
- abergmann

title: 'ANSSI-BP-028 (intermediary)'

description: |-
This profile contains configurations that align to ANSSI-BP-028 v1.2 at the intermediary hardening level.

ANSSI is the French National Information Security Agency, and stands for Agence nationale de la sécurité des systèmes d'information.
ANSSI-BP-028 is a configuration recommendation for GNU/Linux systems.

A copy of the ANSSI-BP-028 can be found at the ANSSI website:
https://www.ssi.gouv.fr/administration/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/

Only the components strictly necessary to the service provided by the system should be installed.
Those whose presence can not be justified should be disabled, removed or deleted.
Performing a minimal install is a good starting point, but doesn't provide any assurance
over any package installed later.
Manual review is required to assess if the installed services are minimal.

selections:
- anssi_sle:all:intermediary
- sysctl_net_ipv4_conf_default_accept_redirects