>From 200eae91a47037c2dcc952ccf7c5526e7c20c410 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Sun, 13 Apr 2014 18:49:36 -0400 Subject: [PATCH 14/26] New Profile: C2S Adding new profile, C2S in support of a U.S. Intelligence Community baseline. This baseline is specifically derived from CIS' RHEL6 control list. Those who are interested in CIS baseline should be able to follow C2S; will work with the CIS guys in the future to get permission to directly call this "CIS", though that's a lower priority when measured against completing the XCCDF/OVAL components. As indicated in the profile description, this baseline is NOT complete -- however wanted to get progress out on the list. At this point the profile will scan the system without errors, though next steps include: - Adding ~64 additional OVAL checks. - Ensuring refine values match baseline standards (currently, inheriting default values from XCCDF) - Remediation scripts --- RHEL/6/input/profiles/C2S.xml | 713 +++++++++++++++++++++++++++++++++++++++++ 1 files changed, 713 insertions(+), 0 deletions(-) create mode 100644 RHEL/6/input/profiles/C2S.xml diff --git a/RHEL/6/input/profiles/C2S.xml b/RHEL/6/input/profiles/C2S.xml new file mode 100644 index 0000000..7ced806 --- /dev/null +++ b/RHEL/6/input/profiles/C2S.xml @@ -0,0 +1,713 @@ + +C2S for Red Hat Enterprise Linux 6 +This profile demonstrates compliance against the +U.S. Government C2S baseline. + +This baseline is tied to the Center for Internet Security's +Red Hat Enterprise Linux 6 Benchmark, v1.2.0 - 06-25-2013, +and uses the same refine values. One could use C2S interchangably +with CIS v1.2.0. For a copy of the CIS RHEL6 benchmark, refer +to: +https://benchmarks.cisecurity.org/tools2/linux/CIS_Red_Hat_Enterprise_Linux_6_Benchmark_v1.2.0.pdf + +This profile is not production ready and should be considered +development preview. As of 13-APR-2014, Out of the 233 +policy-mandated checks, only 169 currently have associated OVAL. +Patches would be most welcome! + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +