RHEL-9-CIS-L1-SERVER.toml

# https://osbuild.org/docs/user-guide/blueprint-reference

version = '1.0.0'

name = 'RHEL-9-CIS-L1-SERVER'

# https://www.cisecurity.org/cis-benchmarks
# https://resources.cisecurity.org/benchmarks
description = '''
Red Hat Enterprise Linux (RHEL) 9
Center for Internet Security® (CIS) Level 1 Server
Profile ID:  xccdf_org.ssgproject.content_profile_cis_server_l1
Benchmark ID:  xccdf_org.ssgproject.content_benchmark_RHEL-9
'''

distro = 'rhel-9'

[customizations]
partitioning_mode = 'auto-lvm'

[customizations.kernel]
append = ''

[customizations.openscap]
profile_id = 'xccdf_org.ssgproject.content_profile_cis_server_l1'

[customizations.services]
enabled = ['crond', 'firewalld', 'systemd-journald', 'rsyslog']
disabled = ['nftables']
masked = []

[[customizations.filesystem]]
mountpoint = '/tmp'
size = 1073741824

[[packages]]
name = 'aide'
version = '*'

[[packages]]
name = 'firewalld'
version = '*'

[[packages]]
name = 'libselinux'
version = '*'

[[packages]]
name = 'nftables'
version = '*'

[[packages]]
name = 'rsyslog'
version = '*'

[[packages]]
name = 'sudo'
version = '*'