6.12. RHEL 9에서 지원되는 SCAP 보안 가이드 프로필

RHEL의 특정 마이너 릴리스에서 제공된 SCAP 콘텐츠만 사용합니다. 강화에 참여하는 구성 요소가 새로운 기능으로 업데이트되는 경우가 있기 때문입니다. 이러한 업데이트를 반영하기 위해 SCAP 콘텐츠 변경이 필요하지만 이전 버전과 항상 호환되지는 않습니다.

다음 표에서는 프로필이 일치하는 정책 버전과 함께 RHEL 9에 제공된 프로필을 확인할 수 있습니다.

표 6.2. RHEL 9.4에서 지원되는 SCAP 보안 가이드 프로필
프로파일 이름	프로파일 ID	정책 버전
French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced`	2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_high`	2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary`	2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_minimal`	2.0
CCN Red Hat Enterprise Linux 9 - 고급	`xccdf_org.ssgproject.content_profile_ccn_advanced`	2022-10
CCN Red Hat Enterprise Linux 9 - Basic	`xccdf_org.ssgproject.content_profile_ccn_basic`	2022-10
CCN Red Hat Enterprise Linux 9 - Intermediate	`xccdf_org.ssgproject.content_profile_ccn_intermediate`	2022-10
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server	`xccdf_org.ssgproject.content_profile_cis`	RHEL 9.4.0에서 RHEL 9.4.2:1.0.0 RHEL 9.4.3 이상:2.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Server	`xccdf_org.ssgproject.content_profile_cis_server_l1`	RHEL 9.4.0에서 RHEL 9.4.2:1.0.0 RHEL 9.4.3 이상:2.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Workstation	`xccdf_org.ssgproject.content_profile_cis_workstation_l1`	RHEL 9.4.0에서 RHEL 9.4.2:1.0.0 RHEL 9.4.3 이상:2.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Workstation	`xccdf_org.ssgproject.content_profile_cis_workstation_l2`	RHEL 9.4.0에서 RHEL 9.4.2:1.0.0 RHEL 9.4.3 이상:2.0.0
[DRAFT] 비료 정보 시스템 및 조직에서 분류되지 않은 정보 (NIST 800-171)	`xccdf_org.ssgproject.content_profile_cui`	r2
Australian Cyber Security Centre (ACSC) Essential Eight	`xccdf_org.ssgproject.content_profile_e8`	버전이 지정되지 않음
HIPAA(Health Insurance Portability and Accountability Act)	`xccdf_org.ssgproject.content_profile_hipaa`	버전이 지정되지 않음
Australian Cyber Security Centre (ACSC) ISM Official	`xccdf_org.ssgproject.content_profile_ism_o`	버전이 지정되지 않음
Protection Profile for General Purpose Operating Systems	`xccdf_org.ssgproject.content_profile_ospp`	4.3
PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_pci-dss`	4.0
The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_stig`	RHEL 9.4.0:V1R2 RHEL 9.4.1 이상:V1R3
The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_stig_gui`	RHEL 9.4.0:V1R2 RHEL 9.4.1 이상:V1R3
CCN Red Hat Enterprise Linux 9 - Basic	`xccdf_org.ssgproject.content_profile_ccn_basic`	2022-10
CCN Red Hat Enterprise Linux 9 - Intermediate	`xccdf_org.ssgproject.content_profile_ccn_intermediate`	2022-10
CCN Red Hat Enterprise Linux 9 - 고급	`xccdf_org.ssgproject.content_profile_ccn_advanced`	2022-10

표 6.3. RHEL 9.3에서 지원되는 SCAP 보안 가이드 프로필
프로파일 이름	프로파일 ID	정책 버전
French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced`	2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_high`	2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary`	2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_minimal`	2.0
CCN Red Hat Enterprise Linux 9 - 고급	`xccdf_org.ssgproject.content_profile_ccn_advanced`	2022-10
CCN Red Hat Enterprise Linux 9 - Basic	`xccdf_org.ssgproject.content_profile_ccn_basic`	2022-10
CCN Red Hat Enterprise Linux 9 - Intermediate	`xccdf_org.ssgproject.content_profile_ccn_intermediate`	2022-10
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server	`xccdf_org.ssgproject.content_profile_cis`	1.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Server	`xccdf_org.ssgproject.content_profile_cis_server_l1`	1.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Workstation	`xccdf_org.ssgproject.content_profile_cis_workstation_l1`	1.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Workstation	`xccdf_org.ssgproject.content_profile_cis_workstation_l2`	1.0.0
[DRAFT] 비료 정보 시스템 및 조직에서 분류되지 않은 정보 (NIST 800-171)	`xccdf_org.ssgproject.content_profile_cui`	r2
Australian Cyber Security Centre (ACSC) Essential Eight	`xccdf_org.ssgproject.content_profile_e8`	버전이 지정되지 않음
HIPAA(Health Insurance Portability and Accountability Act)	`xccdf_org.ssgproject.content_profile_hipaa`	버전이 지정되지 않음
Australian Cyber Security Centre (ACSC) ISM Official	`xccdf_org.ssgproject.content_profile_ism_o`	버전이 지정되지 않음
Protection Profile for General Purpose Operating Systems	`xccdf_org.ssgproject.content_profile_ospp`	4.3
PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_pci-dss`	RHEL 9.3.0에서 RHEL 9.3.2:3.2.1 RHEL 9.3.3:4.0
The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_stig`	RHEL 9.3.0: 초안^[a] RHEL 9.3.2:V1R1 RHEL 9.3.3 이상:V1R2
The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_stig_gui`	RHEL 9.3.0: DRAFT^[a] RHEL 9.3.2:V1R1 RHEL 9.3.3 이상:V1R2
CCN Red Hat Enterprise Linux 9 - Basic	`xccdf_org.ssgproject.content_profile_ccn_basic`	2022-10
CCN Red Hat Enterprise Linux 9 - Intermediate	`xccdf_org.ssgproject.content_profile_ccn_intermediate`	2022-10
CCN Red Hat Enterprise Linux 9 - 고급	`xccdf_org.ssgproject.content_profile_ccn_advanced`	2022-10
^[a] DISA는 아직 RHEL 9에 대한 공식 벤치마크를 발표하지 않았습니다.

표 6.4. RHEL 9.2에서 지원되는 SCAP 보안 가이드 프로필
프로파일 이름	프로파일 ID	정책 버전
French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced`	RHEL 9.2.0에서 RHEL 9.2.2:1.2 RHEL 9.2.3 이상:2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_high`	RHEL 9.2.0에서 RHEL 9.2.2:1.2 RHEL 9.2.3 이상:2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary`	RHEL 9.2.0에서 RHEL 9.2.2:1.2 RHEL 9.2.3 이상:2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_minimal`	RHEL 9.2.0에서 RHEL 9.2.2:1.2 RHEL 9.2.3 이상:2.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server	`xccdf_org.ssgproject.content_profile_cis`	RHEL 9.2.0에서 RHEL 9.2.10:1.0.0 RHEL 9.2.11 이상:2.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Server	`xccdf_org.ssgproject.content_profile_cis_server_l1`	RHEL 9.2.0에서 RHEL 9.2.10:1.0.0 RHEL 9.2.11 이상:2.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Workstation	`xccdf_org.ssgproject.content_profile_cis_workstation_l1`	RHEL 9.2.0에서 RHEL 9.2.10:1.0.0 RHEL 9.2.11 이상:2.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Workstation	`xccdf_org.ssgproject.content_profile_cis_workstation_l2`	RHEL 9.2.0에서 RHEL 9.2.10:1.0.0 RHEL 9.2.11 이상:2.0.0
[DRAFT] 비료 정보 시스템 및 조직에서 분류되지 않은 정보 (NIST 800-171)	`xccdf_org.ssgproject.content_profile_cui`	r2
Australian Cyber Security Centre (ACSC) Essential Eight	`xccdf_org.ssgproject.content_profile_e8`	버전이 지정되지 않음
HIPAA(Health Insurance Portability and Accountability Act)	`xccdf_org.ssgproject.content_profile_hipaa`	버전이 지정되지 않음
Australian Cyber Security Centre (ACSC) ISM Official	`xccdf_org.ssgproject.content_profile_ism_o`	버전이 지정되지 않음
Protection Profile for General Purpose Operating Systems	`xccdf_org.ssgproject.content_profile_ospp`	4.2.1
PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_pci-dss`	RHEL 9.2.0에서 RHEL 9.2.5:3.2.1 RHEL 9.2.6 이상:4.0
The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_stig`	RHEL 9.2.0에서 RHEL 9.2.4로: DRAFT^[a] RHEL 9.2.5:V1R1 RHEL 9.2.6에서 RHEL 9.2.8:V1R2 RHEL 9.2.9 이상:V1R3
The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_stig_gui`	RHEL 9.2.0에서 9.2.4로: DRAFT^[a] RHEL 9.2.5:V1R1 RHEL 9.2.6에서 RHEL 9.2.8:V1R2 RHEL 9.2.9 이상:V1R3
CCN Red Hat Enterprise Linux 9 - Basic	`xccdf_org.ssgproject.content_profile_ccn_basic`	2022-10
CCN Red Hat Enterprise Linux 9 - Intermediate	`xccdf_org.ssgproject.content_profile_ccn_intermediate`	2022-10
CCN Red Hat Enterprise Linux 9 - 고급	`xccdf_org.ssgproject.content_profile_ccn_advanced`	2022-10

표 6.5. RHEL 9.1에서 지원되는 SCAP Security Guide 프로필
프로파일 이름	프로파일 ID	정책 버전
French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced`	1.2
French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_high`	1.2
French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary`	1.2
French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_minimal`	1.2
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server	`xccdf_org.ssgproject.content_profile_cis`	RHEL 9.1.0 및 RHEL 9.1.1:DRAFT^[a] RHEL 9.1.2 이상:1.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Server	`xccdf_org.ssgproject.content_profile_cis_server_l1`	RHEL 9.1.0 및 RHEL 9.1.1:DRAFT^[a] RHEL 9.1.2 이상:1.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Workstation	`xccdf_org.ssgproject.content_profile_cis_workstation_l1`	RHEL 9.1.0 및 RHEL 9.1.1:DRAFT^[a] RHEL 9.1.2 이상:1.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Workstation	`xccdf_org.ssgproject.content_profile_cis_workstation_l2`	RHEL 9.1.0 및 RHEL 9.1.1:DRAFT^[a] RHEL 9.1.2 이상:1.0.0
[DRAFT] 비료 정보 시스템 및 조직에서 분류되지 않은 정보 (NIST 800-171)	`xccdf_org.ssgproject.content_profile_cui`	r2
Australian Cyber Security Centre (ACSC) Essential Eight	`xccdf_org.ssgproject.content_profile_e8`	버전이 지정되지 않음
HIPAA(Health Insurance Portability and Accountability Act)	`xccdf_org.ssgproject.content_profile_hipaa`	버전이 지정되지 않음
Australian Cyber Security Centre (ACSC) ISM Official	`xccdf_org.ssgproject.content_profile_ism_o`	버전이 지정되지 않음
Protection Profile for General Purpose Operating Systems	`xccdf_org.ssgproject.content_profile_ospp`	4.2.1
PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_pci-dss`	3.2.1
[DRAFT] The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_stig`	DRAFT^[a]
[DRAFT] The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_stig_gui`	DRAFT^[a]
^[a] CIS는 아직 RHEL 9에 대한 공식 벤치마크를 게시하지 않았습니다.

표 6.6. RHEL 9.0에서 지원되는 SCAP Security Guide 프로파일
프로파일 이름	프로파일 ID	정책 버전
French National Agency for the Security of Information Systems (ANSSI) BP-028 Enhanced Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced`	RHEL 9.0.0에서 RHEL 9.0.10:1.2 RHEL 9.0.11 이상:2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 High Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_high`	RHEL 9.0.0에서 RHEL 9.0.10:1.2 RHEL 9.0.11 이상:2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 Intermediary Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary`	RHEL 9.0.0에서 RHEL 9.0.10:1.2 RHEL 9.0.11 이상:2.0
French National Agency for the Security of Information Systems (ANSSI) BP-028 Minimal Level	`xccdf_org.ssgproject.content_profile_anssi_bp28_minimal`	RHEL 9.0.0에서 RHEL 9.0.10:1.2 RHEL 9.0.11 이상:2.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server	`xccdf_org.ssgproject.content_profile_cis`	RHEL 9.0.0에서 RHEL 9.0.6:DRAFT^[a] RHEL 9.0.7에서 RHEL 9.0.19:1.0.0 RHEL 9.0.20 이상:2.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Server	`xccdf_org.ssgproject.content_profile_cis_server_l1`	RHEL 9.0.0에서 RHEL 9.0.6:DRAFT^[a] RHEL 9.0.7에서 RHEL 9.0.19:1.0.0 RHEL 9.0.20 이상:2.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Workstation	`xccdf_org.ssgproject.content_profile_cis_workstation_l1`	RHEL 9.0.0에서 RHEL 9.0.6:DRAFT^[a] RHEL 9.0.7에서 RHEL 9.0.19:1.0.0 RHEL 9.0.20 이상:2.0.0
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Workstation	`xccdf_org.ssgproject.content_profile_cis_workstation_l2`	RHEL 9.0.0에서 RHEL 9.0.6:DRAFT^[a] RHEL 9.0.7에서 RHEL 9.0.19:1.0.0 RHEL 9.0.20 이상:2.0.0
[DRAFT] 비료 정보 시스템 및 조직에서 분류되지 않은 정보 (NIST 800-171)	`xccdf_org.ssgproject.content_profile_cui`	r2
Australian Cyber Security Centre (ACSC) Essential Eight	`xccdf_org.ssgproject.content_profile_e8`	버전이 지정되지 않음
HIPAA(Health Insurance Portability and Accountability Act)	`xccdf_org.ssgproject.content_profile_hipaa`	버전이 지정되지 않음
Australian Cyber Security Centre (ACSC) ISM Official	`xccdf_org.ssgproject.content_profile_ism_o`	버전이 지정되지 않음
Protection Profile for General Purpose Operating Systems	`xccdf_org.ssgproject.content_profile_ospp`	RHEL 9.0.0에서 RHEL 9.0.2:DRAFT RHEL 9.0.3 이상:4.2.1
PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_pci-dss`	RHEL 9.0.0에서 RHEL 9.0.14:3.2.1 RHEL 9.0.15:4.0
The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_stig`	RHEL 9.0.0에서 RHEL 9.0.13으로: DRAFT^[a] RHEL 9.0.14:V1R1 RHEL 9.0.15 ~ 9.0.17:V1R2 RHEL 9.0.18 이상:V1R3
The Defense Information Systems Agency Security Technical Implementation Guide (DISA STIG) with GUI for Red Hat Enterprise Linux 9	`xccdf_org.ssgproject.content_profile_stig_gui`	RHEL 9.0.0에서 RHEL 9.0.13으로: DRAFT^[a] RHEL 9.0.14:V1R1 RHEL 9.0.15 ~ 9.0.17:V1R2 RHEL 9.0.18 이상:V1R3
CCN Red Hat Enterprise Linux 9 - Basic	`xccdf_org.ssgproject.content_profile_ccn_basic`	RHEL 9.0.11 이상:2022-10
CCN Red Hat Enterprise Linux 9 - Intermediate	`xccdf_org.ssgproject.content_profile_ccn_intermediate`	RHEL 9.0.11 이상:2022-10
CCN Red Hat Enterprise Linux 9 - 고급	`xccdf_org.ssgproject.content_profile_ccn_advanced`	RHEL 9.0.11 이상:2022-10

6.12. RHEL 9에서 지원되는 SCAP 보안 가이드 프로필

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 문서 정보

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat 소개

Red Hat legal and privacy links

Red Hat legal and privacy links