Skip to content

Commit 5c65aa9

Browse files
Mab879Mab879
committed
Move ISM O references to the control file
1 parent be94600 commit 5c65aa9

File tree

90 files changed

+3
-96
lines changed
  • controls
  • linux_os/guide
    • auditing
      • auditd_configure_rules
        • audit_file_modification/audit_rules_unsuccessful_file_modification
        • audit_privileged_commands/audit_rules_privileged_commands
        • audit_rules_session_events
      • policy_rules
    • services
    • system
      • accounts
        • accounts-pam
          • display_login_attempts
          • locking_out_password_attempts
            • accounts_passwords_pam_faillock_deny_root
            • accounts_passwords_pam_faillock_deny
            • accounts_passwords_pam_faillock_interval
            • accounts_passwords_pam_faillock_unlock_time
            • accounts_passwords_pam_tally2_deny_root
            • accounts_passwords_pam_tally2_unlock_time
          • password_quality/password_quality_pwquality
          • set_password_hashing_algorithm
            • set_password_hashing_algorithm_libuserconf
            • set_password_hashing_algorithm_logindefs
            • set_password_hashing_algorithm_passwordauth
            • set_password_hashing_algorithm_systemauth
        • accounts-physical
        • accounts-restrictions
          • password_expiration
            • accounts_maximum_age_login_defs
            • accounts_minimum_age_login_defs
            • accounts_password_minlen_login_defs
            • accounts_password_warn_age_login_defs
          • password_storage/accounts_password_all_shadowed
          • root_logins/no_shelllogin_for_systemaccounts
      • logging
        • ensure_rsyslog_log_file_configuration
        • rsyslog_accepting_remote_messages/rsyslog_nolisten
        • rsyslog_sending_messages
      • network
        • network-firewalld/ruleset_modifications
        • network-ipv6/configuring_ipv6/network_ipv6_static_address
        • network-wireless/wireless_software/wireless_disable_interfaces
        • network_nmcli_permissions
      • secureboot/secure_boot_enabled
      • selinux/selinux-booleans
      • software
        • integrity
        • sudo/package_sudo_installed
        • system-tools
          • package_dnf-plugin-subscription-manager_installed
          • package_libdnf-plugin-subscription-manager_installed
          • package_subscription-manager_installed
        • updating/dnf-automatic_apply_updates

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

90 files changed

+3
-96
lines changed

‎controls/anssi.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@ title: 'Configuration Recommendations of a GNU/Linux System'
44
id: anssi
55
version: '2.0'
66
source: https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf
7+
reference_type: ism
78

89
levels:
910
- id: minimal

‎controls/ism_o.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,8 @@ policy: 'Australian Signals Directorate Information Security Manual'
55
version: '2024.03'
66
source: 'https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/ism'
77

8+
reference_type: ism
9+
810
levels:
911
- id: base
1012
- id: secret

‎linux_os/guide/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification/rule.yml‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,6 @@ references:
4949
cui: 3.1.7
5050
isa-62443-2009: 4.2.3.10,4.3.2.6.7,4.3.3.3.9,4.3.3.5.8,4.3.3.6.6,4.3.4.4.7,4.3.4.5.6,4.3.4.5.7,4.3.4.5.8,4.4.2.1,4.4.2.2,4.4.2.4
5151
isa-62443-2013: 'SR 1.13,SR 2.10,SR 2.11,SR 2.12,SR 2.6,SR 2.8,SR 2.9,SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 6.1,SR 6.2,SR 7.1,SR 7.6'
52-
ism: 0582,0584,05885,0586,0846,0957
5352
iso27001-2013: A.11.2.6,A.12.4.1,A.12.4.2,A.12.4.3,A.12.4.4,A.12.7.1,A.13.1.1,A.13.2.1,A.14.1.3,A.14.2.7,A.15.2.1,A.15.2.2,A.16.1.4,A.16.1.5,A.16.1.7,A.6.2.1,A.6.2.2
5453
nist: AU-2(d),AU-12(c),CM-6(a)
5554
nist-csf: DE.AE-3,DE.AE-5,DE.CM-1,DE.CM-3,DE.CM-7,ID.SC-4,PR.AC-3,PR.PT-1,PR.PT-4,RS.AN-1,RS.AN-4

‎linux_os/guide/auditing/auditd_configure_rules/audit_privileged_commands/audit_rules_privileged_commands/rule.yml‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,6 @@ references:
5757
cui: 3.1.7
5858
isa-62443-2009: 4.2.3.10,4.3.2.6.7,4.3.3.3.9,4.3.3.5.8,4.3.3.6.6,4.3.4.4.7,4.3.4.5.5,4.3.4.5.6,4.3.4.5.7,4.3.4.5.8,4.3.4.5.9,4.4.2.1,4.4.2.2,4.4.2.4
5959
isa-62443-2013: 'SR 1.13,SR 2.10,SR 2.11,SR 2.12,SR 2.6,SR 2.8,SR 2.9,SR 3.1,SR 3.5,SR 3.8,SR 3.9,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 6.1,SR 6.2,SR 7.1,SR 7.6'
60-
ism: 0582,0584,05885,0586,0846,0957
6160
iso27001-2013: A.11.2.6,A.12.4.1,A.12.4.2,A.12.4.3,A.12.4.4,A.12.7.1,A.13.1.1,A.13.2.1,A.14.1.3,A.14.2.7,A.15.2.1,A.15.2.2,A.16.1.1,A.16.1.2,A.16.1.3,A.16.1.4,A.16.1.5,A.16.1.7,A.6.1.3,A.6.2.1,A.6.2.2
6261
nerc-cip: CIP-004-6 R2.2.2,CIP-004-6 R2.2.3,CIP-007-3 R.1.3,CIP-007-3 R5,CIP-007-3 R5.1.1,CIP-007-3 R5.1.3,CIP-007-3 R5.2.1,CIP-007-3 R5.2.3
6362
nist: AC-2(4),AU-2(d),AU-12(c),AC-6(9),CM-6(a)

‎linux_os/guide/auditing/auditd_configure_rules/audit_rules_session_events/rule.yml‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,6 @@ references:
4545
hipaa: 164.308(a)(1)(ii)(D),164.308(a)(3)(ii)(A),164.308(a)(5)(ii)(C),164.312(a)(2)(i),164.312(b),164.312(d),164.312(e)
4646
isa-62443-2009: 4.2.3.10,4.3.2.6.7,4.3.3.3.9,4.3.3.5.8,4.3.3.6.6,4.3.4.4.7,4.3.4.5.6,4.3.4.5.7,4.3.4.5.8,4.4.2.1,4.4.2.2,4.4.2.4
4747
isa-62443-2013: 'SR 1.13,SR 2.10,SR 2.11,SR 2.12,SR 2.6,SR 2.8,SR 2.9,SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 6.1,SR 6.2,SR 7.1,SR 7.6'
48-
ism: 0582,0584,05885,0586,0846,0957
4948
iso27001-2013: A.11.2.6,A.12.4.1,A.12.4.2,A.12.4.3,A.12.4.4,A.12.7.1,A.13.1.1,A.13.2.1,A.14.1.3,A.14.2.7,A.15.2.1,A.15.2.2,A.16.1.4,A.16.1.5,A.16.1.7,A.6.2.1,A.6.2.2
5049
nist: AU-2(d),AU-12(c),CM-6(a)
5150
nist-csf: DE.AE-3,DE.AE-5,DE.CM-1,DE.CM-3,DE.CM-7,ID.SC-4,PR.AC-3,PR.PT-1,PR.PT-4,RS.AN-1,RS.AN-4

‎linux_os/guide/auditing/policy_rules/audit_access_failed/rule.yml‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,6 @@ identifiers:
3939
cce@rhel10: CCE-89008-7
4040

4141
references:
42-
ism: 0582,0584,05885,0586,0846,0957
4342
nist: AU-2(a)
4443
ospp: FAU_GEN.1.1.c
4544
srg: SRG-OS-000458-GPOS-00203,SRG-OS-000474-GPOS-00219,SRG-OS-000475-GPOS-00220,SRG-OS-000463-GPOS-00207,SRG-OS-000465-GPOS-00209,SRG-OS-000461-GPOS-00205,SRG-APP-000091-CTR-000160,SRG-APP-000492-CTR-001220,SRG-APP-000493-CTR-001225,SRG-APP-000494-CTR-001230,SRG-APP-000500-CTR-001260,SRG-APP-000507-CTR-001295

‎linux_os/guide/auditing/policy_rules/audit_access_failed_aarch64/rule.yml‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,6 @@ identifiers:
3434
cce@rhel10: CCE-87749-8
3535

3636
references:
37-
ism: 0582,0584,05885,0586,0846,0957
3837
nist: AU-2(a)
3938
ospp: FAU_GEN.1.1.c
4039
srg: SRG-OS-000458-GPOS-00203,SRG-OS-000474-GPOS-00219,SRG-OS-000475-GPOS-00220,SRG-OS-000463-GPOS-00207,SRG-OS-000465-GPOS-00209,SRG-OS-000461-GPOS-00205

‎linux_os/guide/auditing/policy_rules/audit_access_failed_ppc64le/rule.yml‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,6 @@ identifiers:
3232
cce@rhel10: CCE-88260-5
3333

3434
references:
35-
ism: 0582,0584,05885,0586,0846,0957
3635
nist: AU-2(a)
3736
ospp: FAU_GEN.1.1.c
3837
srg: SRG-OS-000458-GPOS-00203,SRG-OS-000474-GPOS-00219,SRG-OS-000475-GPOS-00220,SRG-OS-000463-GPOS-00207,SRG-OS-000465-GPOS-00209,SRG-OS-000461-GPOS-00205

‎linux_os/guide/auditing/policy_rules/audit_access_success/rule.yml‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,6 @@ identifiers:
3838
cce@rhel10: CCE-89107-7
3939

4040
references:
41-
ism: 0582,0584,05885,0586,0846,0957
4241
nist: AU-2(a)
4342
ospp: FAU_GEN.1.1.c
4443
srg: SRG-OS-000458-GPOS-00203,SRG-OS-000474-GPOS-00219,SRG-OS-000475-GPOS-00220,SRG-OS-000463-GPOS-00207,SRG-OS-000465-GPOS-00209,SRG-OS-000461-GPOS-00205

‎linux_os/guide/auditing/policy_rules/audit_access_success_aarch64/rule.yml‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,6 @@ identifiers:
3333
cce@rhel10: CCE-88643-2
3434

3535
references:
36-
ism: 0582,0584,05885,0586,0846,0957
3736
nist: AU-2(a)
3837
ospp: FAU_GEN.1.1.c
3938
srg: SRG-OS-000458-GPOS-00203,SRG-OS-000474-GPOS-00219,SRG-OS-000475-GPOS-00220,SRG-OS-000463-GPOS-00207,SRG-OS-000465-GPOS-00209,SRG-OS-000461-GPOS-00205

0 commit comments

Comments
 (0)