ANSSI-BP-028 (high)

Ansible Role for ANSSI-BP-028 (high)

Profile Description:

This profile includes settings that follow the ANSSI-BP-028 v2.0 guidelines at a high security level. ANSSI is the French National Information Security Agency, known as Agence nationale de la sécurité des systèmes d'information. ANSSI-BP-028 is a recommendation for configuring GNU/Linux systems. You can find the ANSSI-BP-028 document on their website:

• French Version
• English Version

The tasks in this role are created using OpenSCAP. For more information about generating Ansible playbooks, visit OpenSCAP Project.

If you want to suggest a fix or improvement for a failed or missing Ansible task, check the ComplianceAsCode project at ComplianceAsCode.

Requirements:

• You need Ansible version 2.9 or higher.

Role Variables:

To tailor the role to your needs, refer to the list of variables.

Dependencies:

• None.

Example Role Usage:

Run ansible-galaxy install RedHatOfficial.rhel8_anssi_bp28_high to download and install the role. Then, use the following playbook snippet to execute the role:

- hosts: all
  roles:
    - { role: RedHatOfficial.rhel8_anssi_bp28_high }

Next, to check the playbook on your local machine, run:

ansible-playbook -i "localhost," -c local --check playbook.yml

To deploy it (this may change your local machine's settings!):

ansible-playbook -i "localhost," -c local playbook.yml

License:

BSD-3-Clause

Author Information:

This Ansible role was created based on security policies from the ComplianceAsCode project. For the list of authors and contributors, visit Contributors.