New Profile for RHEL10: BSI

linux_os/guide/services/mask_nonessential_services/rule.yml

@@ -23,6 +23,7 @@ severity: low
 
 identifiers:
     cce@rhel9: CCE-89970-8
+    cce@rhel10: CCE-86933-9
     cce@sle12: CCE-92309-4
     cce@sle15: CCE-92463-9
 

linux_os/guide/services/ssh/ssh_server/sshd_disable_root_password_login/rule.yml

@@ -27,6 +27,7 @@ severity: medium
 
 identifiers:
     cce@rhel9: CCE-88194-6
+    cce@rhel10: CCE-86741-6
 
 ocil_clause: 'it is commented out or not configured properly'
 

linux_os/guide/system/network/network-firewalld/set_firewalld_appropriate_zone/rule.yml

@@ -19,6 +19,7 @@ platform: package[firewalld]
 identifiers:
     cce@rhel8: CCE-86111-2
     cce@rhel9: CCE-90607-3
+    cce@rhel10: CCE-88271-2
     cce@sle15: CCE-92556-0
 
 references:

linux_os/guide/system/network/network-firewalld/unnecessary_firewalld_services_ports_disabled/rule.yml

@@ -24,6 +24,7 @@ platform: package[firewalld]
 
 identifiers:
     cce@rhel9: CCE-87628-4
+    cce@rhel10: CCE-87763-9
     cce@sle15: CCE-92552-9
     cce@slmicro5: CCE-94011-4
 

linux_os/guide/system/network/network-wireless/wireless_software/kernel_module_cfg80211_disabled/rule.yml

@@ -16,6 +16,7 @@ severity: medium
 identifiers:
     cce@rhcos4: CCE-85932-2
     cce@rhel9: CCE-87615-1
+    cce@rhel10: CCE-90514-1
 
 references:
     nist: AC-18(a),AC-18(3),CM-7(a),CM-7(b),CM-6(a),MP-7,AC-18(4)

linux_os/guide/system/network/network-wireless/wireless_software/kernel_module_iwlmvm_disabled/rule.yml

@@ -16,6 +16,7 @@ severity: medium
 identifiers:
     cce@rhcos4: CCE-85933-0
     cce@rhel9: CCE-90727-9
+    cce@rhel10: CCE-88683-8
 
 references:
     nist: AC-18(a),AC-18(3),CM-7(a),CM-7(b),CM-6(a),MP-7,AC-18(4)

linux_os/guide/system/network/network-wireless/wireless_software/kernel_module_iwlwifi_disabled/rule.yml

@@ -16,6 +16,7 @@ severity: medium
 identifiers:
     cce@rhcos4: CCE-85934-8
     cce@rhel9: CCE-89240-6
+    cce@rhel10: CCE-89230-7
 
 references:
     nist: AC-18(a),AC-18(3),CM-7(a),CM-7(b),CM-6(a),MP-7,AC-18(4)

linux_os/guide/system/network/network-wireless/wireless_software/kernel_module_mac80211_disabled/rule.yml

@@ -16,6 +16,7 @@ severity: medium
 identifiers:
     cce@rhcos4: CCE-85935-5
     cce@rhel9: CCE-87086-5
+    cce@rhel10: CCE-87948-6
 
 references:
     nist: AC-18(a),AC-18(3),CM-7(a),CM-7(b),CM-6(a),MP-7,AC-18(4)

linux_os/guide/system/network/network-wireless/wireless_software/wireless_disable_in_bios/rule.yml

@@ -19,6 +19,7 @@ severity: unknown
 identifiers:
     cce@rhcos4: CCE-82659-4
     cce@rhel9: CCE-89909-6
+    cce@rhel10: CCE-88738-0
 
 references:
     cis-csc: 11,12,14,15,3,8,9

linux_os/guide/system/network/network_ssl/only_allow_specific_certs/rule.yml

@@ -24,6 +24,7 @@ identifiers:
     cce@ocp4: CCE-87411-5
     cce@rhcos4: CCE-87849-6
     cce@rhel9: CCE-89013-7
+    cce@rhel10: CCE-87135-0
 
 ocil_clause: non-trusted CA is installed in the system
 

linux_os/guide/system/permissions/mounting/bios_disable_usb_boot/rule.yml

@@ -17,6 +17,7 @@ severity: unknown
 identifiers:
     cce@rhcos4: CCE-82662-8
     cce@rhel9: CCE-87913-0
+    cce@rhel10: CCE-87595-5
 
 references:
     cis-csc: 12,16

linux_os/guide/system/software/integrity/endpoint_security_software/install_antivirus/rule.yml

@@ -24,6 +24,7 @@ severity: high
 identifiers:
     cce@rhel8: CCE-83879-7
     cce@rhel9: CCE-86556-8
+    cce@rhel10: CCE-90098-5
 
 references:
     cis-csc: 12,13,14,4,7,8

linux_os/guide/system/software/integrity/endpoint_security_software/install_endpoint_security_software/rule.yml

@@ -24,3 +24,4 @@ fixtext: |-
 
 identifiers:
     cce@rhel9: CCE-88504-6
+    cce@rhel10: CCE-87008-9

linux_os/guide/system/software/integrity/endpoint_security_software/install_hids/rule.yml

@@ -21,6 +21,7 @@ conflicts:
 identifiers:
     cce@rhel8: CCE-80831-1
     cce@rhel9: CCE-88837-0
+    cce@rhel10: CCE-88206-8
     cce@sle12: CCE-92218-7
     cce@sle15: CCE-85789-6
 

products/rhel10/profiles/bsi.profile

@@ -0,0 +1,28 @@
+documentation_complete: true
+
+title: 'BSI SYS.1.1 and SYS.1.3'
+
+reference: https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Grundschutz/International/bsi_it_gs_comp_2022.pdf
+
+metadata:
+    SMEs:
+        - sluetze
+    version: 2022
+
+description: |-
+    This profile defines a baseline that aligns to the BSI (Federal Office for Security Information) IT-Grundschutz
+    Basic-Protection.
+
+    This baseline implements OS-Level configuration requirements from the following
+    sources:
+
+    - Building-Block SYS.1.1 General Server
+    - Building-Block SYS.1.3 Linux Server
+
+selections:
+    - bsi_sys_1_1_rhel10:all
+    - bsi_sys_1_3_rhel10:all
+
+    # BSI APP.4.4.A4
+    - var_selinux_policy_name=targeted
+    - var_selinux_state=enforcing

shared/references/cce-redhat-avail.txt

@@ -76,7 +76,6 @@ CCE-86726-7
 CCE-86728-3
 CCE-86730-9
 CCE-86734-1
-CCE-86741-6
 CCE-86742-4
 CCE-86743-2
 CCE-86745-7
@@ -154,7 +153,6 @@ CCE-86927-1
 CCE-86928-9
 CCE-86929-7
 CCE-86930-5
-CCE-86933-9
 CCE-86934-7
 CCE-86935-4
 CCE-86936-2
@@ -190,7 +188,6 @@ CCE-87000-6
 CCE-87002-2
 CCE-87005-5
 CCE-87006-3
-CCE-87008-9
 CCE-87010-5
 CCE-87011-3
 CCE-87012-1
@@ -240,7 +237,6 @@ CCE-87131-9
 CCE-87132-7
 CCE-87133-5
 CCE-87134-3
-CCE-87135-0
 CCE-87136-8
 CCE-87138-4
 CCE-87139-2
@@ -519,7 +515,6 @@ CCE-87590-6
 CCE-87592-2
 CCE-87593-0
 CCE-87594-8
-CCE-87595-5
 CCE-87597-1
 CCE-87600-3
 CCE-87603-7
@@ -616,7 +611,6 @@ CCE-87758-9
 CCE-87759-7
 CCE-87760-5
 CCE-87761-3
-CCE-87763-9
 CCE-87764-7
 CCE-87768-8
 CCE-87769-6
@@ -738,7 +732,6 @@ CCE-87943-7
 CCE-87944-5
 CCE-87945-2
 CCE-87947-8
-CCE-87948-6
 CCE-87950-2
 CCE-87951-0
 CCE-87952-8
@@ -889,7 +882,6 @@ CCE-88199-5
 CCE-88201-9
 CCE-88202-7
 CCE-88204-3
-CCE-88206-8
 CCE-88208-4
 CCE-88209-2
 CCE-88211-8
@@ -930,7 +922,6 @@ CCE-88265-4
 CCE-88266-2
 CCE-88267-0
 CCE-88268-8
-CCE-88271-2
 CCE-88272-0
 CCE-88273-8
 CCE-88277-9
@@ -1186,7 +1177,6 @@ CCE-88678-8
 CCE-88679-6
 CCE-88680-4
 CCE-88681-2
-CCE-88683-8
 CCE-88684-6
 CCE-88685-3
 CCE-88690-3
@@ -1218,7 +1208,6 @@ CCE-88734-9
 CCE-88735-6
 CCE-88736-4
 CCE-88737-2
-CCE-88738-0
 CCE-88739-8
 CCE-88740-6
 CCE-88743-0
@@ -1489,7 +1478,6 @@ CCE-89222-4
 CCE-89224-0
 CCE-89226-5
 CCE-89229-9
-CCE-89230-7
 CCE-89231-5
 CCE-89235-6
 CCE-89237-2
@@ -2038,7 +2026,6 @@ CCE-90091-0
 CCE-90092-8
 CCE-90095-1
 CCE-90097-7
-CCE-90098-5
 CCE-90101-7
 CCE-90102-5
 CCE-90103-3
@@ -2314,7 +2301,6 @@ CCE-90509-1
 CCE-90510-9
 CCE-90512-5
 CCE-90513-3
-CCE-90514-1
 CCE-90515-8
 CCE-90518-2
 CCE-90520-8