Merge pull request #14407 from jan-cerny/bsi_stability

Add BSI to stable profiles

Author: Mab879

tests/data/profile_stability/rhel10/bsi.profile

@@ -0,0 +1,216 @@
+account_unique_id
+account_unique_name
+aide_build_database
+aide_periodic_cron_checking
+aide_scan_notification
+audit_rules_continue_loading
+audit_rules_dac_modification_chmod
+audit_rules_dac_modification_chown
+audit_rules_dac_modification_fchmod
+audit_rules_dac_modification_fchmodat
+audit_rules_dac_modification_fchmodat2
+audit_rules_dac_modification_fchown
+audit_rules_dac_modification_fchownat
+audit_rules_dac_modification_fremovexattr
+audit_rules_dac_modification_fsetxattr
+audit_rules_dac_modification_lchown
+audit_rules_dac_modification_lremovexattr
+audit_rules_dac_modification_lsetxattr
+audit_rules_dac_modification_removexattr
+audit_rules_dac_modification_setxattr
+audit_rules_execution_chcon
+audit_rules_execution_setfacl
+audit_rules_login_events_faillock
+audit_rules_login_events_lastlog
+audit_rules_privileged_commands
+audit_rules_privileged_commands_usermod
+audit_rules_session_events
+audit_rules_suid_auid_privilege_function
+audit_rules_sysadmin_actions
+audit_rules_usergroup_modification_group
+audit_rules_usergroup_modification_gshadow
+audit_rules_usergroup_modification_opasswd
+audit_rules_usergroup_modification_passwd
+audit_rules_usergroup_modification_shadow
+audit_sudo_log_events
+bios_disable_usb_boot
+bios_enable_execution_restrictions
+configure_firewalld_ports
+directory_groupowner_sshd_config_d
+directory_owner_sshd_config_d
+directory_permissions_sshd_config_d
+encrypt_partitions
+fapolicy_default_deny
+file_group_ownership_var_log_audit
+file_groupowner_at_allow
+file_groupowner_backup_etc_group
+file_groupowner_backup_etc_gshadow
+file_groupowner_backup_etc_passwd
+file_groupowner_backup_etc_shadow
+file_groupowner_cron_allow
+file_groupowner_cron_d
+file_groupowner_cron_daily
+file_groupowner_cron_hourly
+file_groupowner_cron_monthly
+file_groupowner_cron_weekly
+file_groupowner_cron_yearly
+file_groupowner_crontab
+file_groupowner_efi_grub2_cfg
+file_groupowner_efi_user_cfg
+file_groupowner_etc_group
+file_groupowner_etc_gshadow
+file_groupowner_etc_issue
+file_groupowner_etc_issue_net
+file_groupowner_etc_motd
+file_groupowner_etc_passwd
+file_groupowner_etc_security_opasswd
+file_groupowner_etc_security_opasswd_old
+file_groupowner_etc_shadow
+file_groupowner_etc_shells
+file_groupowner_grub2_cfg
+file_groupowner_sshd_config
+file_groupowner_sshd_drop_in_config
+file_groupowner_user_cfg
+file_groupownership_audit_binaries
+file_groupownership_audit_configuration
+file_groupownership_home_directories
+file_groupownership_sshd_private_key
+file_groupownership_sshd_pub_key
+file_owner_at_allow
+file_owner_backup_etc_group
+file_owner_backup_etc_gshadow
+file_owner_backup_etc_passwd
+file_owner_backup_etc_shadow
+file_owner_cron_allow
+file_owner_cron_d
+file_owner_cron_daily
+file_owner_cron_hourly
+file_owner_cron_monthly
+file_owner_cron_weekly
+file_owner_cron_yearly
+file_owner_crontab
+file_owner_efi_grub2_cfg
+file_owner_efi_user_cfg
+file_owner_etc_group
+file_owner_etc_gshadow
+file_owner_etc_issue
+file_owner_etc_issue_net
+file_owner_etc_motd
+file_owner_etc_passwd
+file_owner_etc_security_opasswd
+file_owner_etc_security_opasswd_old
+file_owner_etc_shadow
+file_owner_etc_shells
+file_owner_grub2_cfg
+file_owner_sshd_config
+file_owner_sshd_drop_in_config
+file_owner_user_cfg
+file_ownership_audit_binaries
+file_ownership_audit_configuration
+file_ownership_home_directories
+file_ownership_sshd_private_key
+file_ownership_sshd_pub_key
+file_ownership_var_log_audit
+file_permission_user_bash_history
+file_permissions_at_allow
+file_permissions_audit_binaries
+file_permissions_audit_configuration
+file_permissions_backup_etc_group
+file_permissions_backup_etc_gshadow
+file_permissions_backup_etc_passwd
+file_permissions_backup_etc_shadow
+file_permissions_cron_allow
+file_permissions_cron_d
+file_permissions_cron_daily
+file_permissions_cron_hourly
+file_permissions_cron_monthly
+file_permissions_cron_weekly
+file_permissions_cron_yearly
+file_permissions_crontab
+file_permissions_efi_grub2_cfg
+file_permissions_efi_user_cfg
+file_permissions_etc_group
+file_permissions_etc_gshadow
+file_permissions_etc_issue
+file_permissions_etc_issue_net
+file_permissions_etc_motd
+file_permissions_etc_passwd
+file_permissions_etc_security_opasswd
+file_permissions_etc_security_opasswd_old
+file_permissions_etc_shadow
+file_permissions_etc_shells
+file_permissions_grub2_cfg
+file_permissions_home_directories
+file_permissions_sshd_config
+file_permissions_sshd_drop_in_config
+file_permissions_sshd_private_key
+file_permissions_sshd_pub_key
+file_permissions_unauthorized_sgid
+file_permissions_unauthorized_suid
+file_permissions_unauthorized_world_writable
+file_permissions_ungroupowned
+file_permissions_user_cfg
+file_permissions_var_log_audit
+firewalld_sshd_port_enabled
+gid_passwd_group_same
+group_unique_id
+group_unique_name
+grub2_audit_argument
+grub2_audit_backlog_limit_argument
+grub2_enable_selinux
+grub2_nousb_argument
+grub2_rng_core_default_quality_argument
+install_antivirus
+install_endpoint_security_software
+install_hids
+kernel_module_bluetooth_disabled
+kernel_module_cfg80211_disabled
+kernel_module_firewire-core_disabled
+kernel_module_iwlmvm_disabled
+kernel_module_iwlwifi_disabled
+kernel_module_mac80211_disabled
+kernel_module_usb-storage_disabled
+mask_nonessential_services
+no_files_or_dirs_ungroupowned
+no_files_or_dirs_unowned_by_user
+only_allow_specific_certs
+package_aide_installed
+package_audit-libs_installed
+package_audit_installed
+package_cron_installed
+package_fapolicyd_installed
+package_firewalld_installed
+package_libselinux_installed
+package_telnet-server_removed
+package_telnet_removed
+partition_for_home
+partition_for_opt
+partition_for_tmp
+partition_for_usr
+partition_for_var
+partition_for_var_log
+partition_for_var_tmp
+rpm_verify_hashes
+rpm_verify_ownership
+selinux_confinement_of_daemons
+selinux_not_disabled
+selinux_policytype
+selinux_state
+service_auditd_enabled
+service_autofs_disabled
+service_bluetooth_disabled
+service_fapolicyd_enabled
+service_firewalld_enabled
+service_sshd_enabled
+set_firewalld_appropriate_zone
+sshd_allow_only_protocol2
+sshd_disable_empty_passwords
+sshd_disable_root_password_login
+sshd_enable_pubkey_auth
+unnecessary_firewalld_services_ports_disabled
+var_accounts_passwords_pam_faillock_dir=run
+var_audit_backlog_limit=8192
+var_selinux_policy_name=targeted
+var_selinux_state=enforcing
+wireless_disable_in_bios
+wireless_disable_interfaces