Closed comps closed 1 month ago
List of multi-level profiles where higher levels inherit from lower ones:
high
, enhanced
, intermediary
, and minimal
high
is the superset of other levels as it inherits from enhanced
(enhanced
interits from intermediary
and so on) - https://github.com/ComplianceAsCode/content/blob/master/controls/anssi.yml#L6server
and workstation
) and each has 2 levels (cis_server_l1
, cis
(==Server Level 2), cis_workstation_l1
, and cis_workstation_l2
)cis
is superset of cis_server_l1
, cis_workstation_l2
is superset of cis_workstation_l1
) - https://github.com/ComplianceAsCode/content/blob/master/controls/cis_rhel8.yml#L7 or https://github.com/ComplianceAsCode/content/blob/master/controls/cis_rhel9.yml#L7advanced
, intermediate
, and basic
advanced
is superset of other levels and inherints from intermediate
. intermediate
inherits from basic
- https://github.com/ComplianceAsCode/content/blob/master/controls/ccn_rhel9.yml
An idea by @mildas - we could significantly reduce our testing matrix if we tested only
anssi_bp28_enhanced
enhanced
,high
,intermediary
,minimal
ccn_advanced
advanced
,intermediate
,minimal
It isn't 100% coverage as the profiles might theoretically have different variables, so a profile with the largest set of rules might still behave differently within the subset of rules of a smaller profile, ... but I think that's a reasonable trade-off for the significant testing matrix reduction.