Merge pull request #20 from yuumasato/ANSSI_R9-hardware-configuration

Add note and select rules for ANSSI R9
ggbecker · Dec 10, 2020 · 62eb553 · 62eb553
2 parents 97c5dc8 + 4567a2f
commit 62eb553
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/controls/anssi.yml b/controls/anssi.yml
@@ -131,7 +131,14 @@ controls:
   - id: R9
     level: intermediary
     title: Hardware configuration
-    # rules: TBD
+    notes: >-
+      Configurations recommended for this requirement are to be performed at the BIOS level.
+      The content automation cannot really configure the BIOS, but can in some cases,
+      check settings that are visible to the OS. Like for example the NX/DX setting.
+    rules:
+    - sysctl_kernel_exec_shield
+    - bios_enable_execution_restrictions
+    - install_PAE_kernel_on_x86-32
 
   - id: R10
     level: intermediary