6.12. RHEL 8에서 지원되는 SCAP 보안 가이드 프로필
RHEL의 특정 마이너 릴리스에서 제공된 SCAP 콘텐츠만 사용합니다. 강화에 참여하는 구성 요소가 새로운 기능으로 업데이트되는 경우가 있기 때문입니다. 이러한 업데이트를 반영하기 위해 SCAP 콘텐츠 변경이 필요하지만 이전 버전과 항상 호환되지는 않습니다.
다음 표에서는 프로필이 정렬되는 정책 버전과 함께 RHEL의 각 마이너 버전에서 제공되는 프로필을 찾을 수 있습니다.
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level |
| 2.0 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level |
| 2.0 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level |
| 2.0 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level |
| 2.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server |
| 3.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Server |
| 3.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Workstation |
| 3.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Workstation |
| 3.0.0 |
| Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171) |
| r1 |
| Australian Cyber Security Centre (ACSC) Essential Eight |
| 버전이 지정되지 않음 |
| HIPAA(Health Insurance Portability and Accountability Act) |
| 버전이 지정되지 않음 |
| Australian Cyber Security Centre (ACSC) ISM Official |
| 버전이 지정되지 않음 |
| Protection Profile for General Purpose Operating Systems |
| 4.2.1 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
|
RHEL 8.10.0에서 RHEL 8.10.4:4.0 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 8 |
|
RHEL 8.10.0:V1R13 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 8 |
|
RHEL 8.10.0:V1R13 |
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level |
| 2.0 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level |
| 2.0 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level |
| 2.0 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level |
| 2.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server |
|
RHEL 8.9.0 및 RHEL 8.9.2:2.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Server |
|
RHEL 8.9.0 및 RHEL 8.9.2:2.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Workstation |
|
RHEL 8.9.0 및 RHEL 8.9.2:2.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Workstation |
|
RHEL 8.9.0 및 RHEL 8.9.2:2.0.0 |
| Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171) |
| r1 |
| Australian Cyber Security Centre (ACSC) Essential Eight |
| 버전이 지정되지 않음 |
| HIPAA(Health Insurance Portability and Accountability Act) |
| 버전이 지정되지 않음 |
| Australian Cyber Security Centre (ACSC) ISM Official |
| 버전이 지정되지 않음 |
| Protection Profile for General Purpose Operating Systems |
| 4.2.1 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
|
RHEL 8.9.0 및 RHEL 8.9.2:3.2.1 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 8 |
|
RHEL 8.9.0 및 RHEL 8.9.2:V1R11 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 8 |
|
RHEL 8.9.0 및 RHEL 8.9.2:V1R11 |
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level |
| 2.0 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level |
| 2.0 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level |
| 2.0 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level |
| 2.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server |
|
RHEL 8.8.0 및 RHEL 8.8.5:2.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Server |
|
RHEL 8.8.0 및 RHEL 8.8.5:2.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Workstation |
|
RHEL 8.8.0 및 RHEL 8.8.5:2.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Workstation |
|
RHEL 8.8.0 및 RHEL 8.8.5:2.0.0 |
| Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171) |
| r1 |
| Australian Cyber Security Centre (ACSC) Essential Eight |
| 버전이 지정되지 않음 |
| HIPAA(Health Insurance Portability and Accountability Act) |
| 버전이 지정되지 않음 |
| Australian Cyber Security Centre (ACSC) ISM Official |
| 버전이 지정되지 않음 |
| Protection Profile for General Purpose Operating Systems |
| 4.2.1 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
|
RHEL 8.8.0 및 RHEL 8.8.5:3.2.1 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 8 |
|
RHEL 8.8.0에서 RHEL 8.8.5:V1R9 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 8 |
|
RHEL 8.8.0에서 RHEL 8.8.5:V1R9 |
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level |
| 1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level |
| 1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level |
| 1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level |
| 1.2 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server |
| 2.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Server |
| 2.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Workstation |
| 2.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Workstation |
| 2.0.0 |
| Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171) |
| r1 |
| Australian Cyber Security Centre (ACSC) Essential Eight |
| 버전이 지정되지 않음 |
| HIPAA(Health Insurance Portability and Accountability Act) |
| 버전이 지정되지 않음 |
| Australian Cyber Security Centre (ACSC) ISM Official |
| 버전이 지정되지 않음 |
| Protection Profile for General Purpose Operating Systems |
| 4.2.1 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
| 3.2.1 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 8 |
|
RHEL 8.7.0 및 RHEL 8.7.1:V1R7 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 8 |
|
RHEL 8.7.0 및 RHEL 8.7.1:V1R7 |
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level |
|
RHEL 8.6.0에서 8.6.10:1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level |
|
RHEL 8.6.0에서 8.6.10:1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level |
|
RHEL 8.6.0에서 8.6.10:1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level |
|
RHEL 8.6.0에서 8.6.10:1.2 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server |
|
RHEL 8.6.0에서 RHEL 8.6.2:1.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Server |
|
RHEL 8.6.0에서 RHEL 8.6.2:1.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Workstation |
|
RHEL 8.6.0에서 RHEL 8.6.2:1.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Workstation |
|
RHEL 8.6.0에서 RHEL 8.6.2:1.0.0 |
| Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171) |
| r1 |
| Australian Cyber Security Centre (ACSC) Essential Eight |
| 버전이 지정되지 않음 |
| HIPAA(Health Insurance Portability and Accountability Act) |
| 버전이 지정되지 않음 |
| Australian Cyber Security Centre (ACSC) ISM Official |
| 버전이 지정되지 않음 |
| Protection Profile for General Purpose Operating Systems |
| 4.2.1 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
| 3.2.1 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 8 |
|
RHEL 8.6.0:V1R5 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 8 |
|
RHEL 8.6.0:V1R5 |
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level |
| 1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level |
| 1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level |
| 1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level |
| 1.2 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server |
| 1.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Server |
| 1.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Workstation |
| 1.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Workstation |
| 1.0.0 |
| Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171) |
| r1 |
| Australian Cyber Security Centre (ACSC) Essential Eight |
| 버전이 지정되지 않음 |
| HIPAA(Health Insurance Portability and Accountability Act) |
| 버전이 지정되지 않음 |
| Australian Cyber Security Centre (ACSC) ISM Official |
| 버전이 지정되지 않음 |
| Protection Profile for General Purpose Operating Systems |
| 4.2.1 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
| 3.2.1 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 8 |
|
RHEL 8.5.0에서 RHEL 8.5.3:V1R3 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 8 |
|
RHEL 8.5.0에서 RHEL 8.5.3:V1R3 |
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level |
| 1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level |
| RHEL 8.4.4 이상:1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level |
| 1.2 |
| French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level |
| 1.2 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server |
|
RHEL 8.4.3 이상:1.0.0 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Server |
|
RHEL 8.4.4에서 RHEL 8.4.10:1.0.1 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 1 - Workstation |
|
RHEL 8.4.4에서 RHEL 8.4.10:1.0.1 |
| CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Workstation |
|
RHEL 8.4.4에서 RHEL 8.4.10:1.0.1 |
| Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171) |
| r1 |
| Australian Cyber Security Centre (ACSC) Essential Eight |
| 버전이 지정되지 않음 |
| Australian Cyber Security Centre (ACSC) ISM Official |
| RHEL 8.4.4 이상: 버전이 지정되지 않음 |
| HIPAA(Health Insurance Portability and Accountability Act) |
| 버전이 지정되지 않음 |
| Protection Profile for General Purpose Operating Systems |
| 4.2.1 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
| 3.2.1 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 8 |
|
RHEL 8.4.3 및 이전:V1R1 |
| The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 8 |
|
RHEL 8.4.4에서 RHEL 8.4.7:V1R3 |
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| CIS Red Hat Enterprise Linux 8 Benchmark |
| 1.0.0 |
| Unclassified Information in Non-federal Information Systems and Organizations (NIST 800-171) |
| r1 |
| Australian Cyber Security Centre (ACSC) Essential Eight |
| 버전이 지정되지 않음 |
| HIPAA(Health Insurance Portability and Accountability Act) |
| 버전이 지정되지 않음 |
| Protection Profile for General Purpose Operating Systems |
| 4.2.1 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
| 3.2.1 |
| [DRAFT] The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 8 |
| 초안 |
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| Australian Cyber Security Centre (ACSC) Essential Eight |
| 버전이 지정되지 않음 |
| Protection Profile for General Purpose Operating Systems |
| 4.2.1 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
| 3.2.1 |
| [DRAFT] DISA STIG for Red Hat Enterprise Linux 8 |
| 초안 |
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| Protection Profile for General Purpose Operating Systems |
| 4.2.1 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
| 3.2.1 |
| 프로파일 이름 | 프로파일 ID | 정책 버전 |
|---|---|---|
| OSPP - Protection Profile for General Purpose Operating Systems |
| 초안 |
| PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8 |
| 3.2.1 |
