Add note and select rules for ANSSI R9

ggbecker · Nov 30, 2020 · 4567a2f · 4567a2f
1 parent b71dbe1
commit 4567a2f
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/controls/anssi.yml b/controls/anssi.yml
@@ -124,7 +124,14 @@ controls:
   - id: R9
     level: intermediary
     title: Hardware configuration
-    # rules: TBD
+    notes: >-
+      Configurations recommended for this requirement are to be performed at the BIOS level.
+      The content automation cannot really configure the BIOS, but can in some cases,
+      check settings that are visible to the OS. Like for example the NX/DX setting.
+    rules:
+    - sysctl_kernel_exec_shield
+    - bios_enable_execution_restrictions
+    - install_PAE_kernel_on_x86-32
 
   - id: R10
     level: intermediary