ANSSI-BP-028 (minimal)

Ansible Role for ANSSI-BP-028 (minimal)

Profile Description:
This profile includes settings that follow the ANSSI-BP-028 v2.0 guidelines at the basic security level.
ANSSI is the French National Information Security Agency (Agence nationale de la sécurité des systèmes d'information).
ANSSI-BP-028 offers configuration advice for GNU/Linux systems.
You can find a copy of ANSSI-BP-028 on the ANSSI website:
ANSSI Guidelines
An English version is also available here:
ANSSI English Version

The tasks in this role are created using OpenSCAP.
For more details on how to create Ansible playbooks using OpenSCAP, visit OpenSCAP GitHub.

If you have a fix or improvement for any Ansible task that isn’t working or is missing in this role,
check out the ComplianceAsCode project at ComplianceAsCode GitHub.

Requirements

• Ansible version 2.9 or higher

Role Variables

To tailor the role to your needs, review the list of variables.

Dependencies

None

Example Role Usage

To download and install the role, run:
ansible-galaxy install RedHatOfficial.rhel8_anssi_bp28_minimal
Then, you can use this playbook snippet to run the Ansible role:

- hosts: all
  roles:
     - { role: RedHatOfficial.rhel8_anssi_bp28_minimal }

Next, check the playbook locally with this command:

ansible-playbook -i "localhost," -c local --check playbook.yml

To apply it (this might change settings on your local machine!):

ansible-playbook -i "localhost," -c local playbook.yml

License

BSD-3-Clause

Author Information

This Ansible role was created based on security policies from the ComplianceAsCode project.
For the latest list of authors and contributors, visit:
Contributors List