PowerSC

 View Only
  • 1.  About AIX CIS benchmark & Tools + PowerSC

    Posted Thu November 04, 2021 02:22 AM

     I noticed CIS AIX 7.1 v2.0.0 benchmark was published a while ago

    We are using CIS benchmarks as Standard security baseline for our AIX servers, so I'm always interested how different benchmarks & Tools are aligned,

    so if possible, I would have some questions: 


    • How about the PowerSC 2.0.1 AIX CIS template, is it based already on the new benchmark?

    • And what is the status for AIX72 (and upcoming AIX73) benchmarks? To be honest, I feel bit bad when needed to refer to AIX71 benchmarks in Security Audit, customer queries etc occasions for AIX72 environments.. 

    Thanks for replies already beforehand!



    ------------------------------
    Tommi Sihvo, Lead Service Architect
    TietoEVRY, Compute Services
    email tommi.sihvo@tieto.com mobile +358 (0)40 5180 Finland
    ------------------------------


  • 2.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Fri November 05, 2021 04:01 AM
    Hi Tommi,

    yes, the new benchmark for AIX 7.1 was published 1 month ago. CIS CAT Assessor should be updated already. Did you check CIS site?

    Regarding AIX 7.2 benchmark, it is now in work and I hope it will be published until end of the year. I didn't hear about any plans for AIX 7.3 benchmark and I think, the earliest possible date will be Q3 2022.

    Best regards
    Andrey

    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 3.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Fri November 05, 2021 04:06 AM
    replying to myself :-) I checked the CIS site now and yes, there is no XML file for CIS CAT. I opened a ticket.

    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 4.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Fri November 05, 2021 04:09 AM
    Thanks Andrey! :)

    Yes, noticed your comment on CIS site; and yes..I did check the cis cat full ; old xml benchmark there.. :)
    Thanks for AIX72 info + pushing this xml issue! 
    Br,
    tommi

    ------------------------------
    Tommi Sihvo, Lead Service Architect
    TietoEVRY, Compute Services
    email tommi.sihvo@tieto.com mobile +358 (0)40 5180 Finland
    ------------------------------



  • 5.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Mon November 08, 2021 09:25 AM
    PowerSC 2.0.0.1 was released on Oct 15th  just a few days after the benchmark was published (Oct 4th). We will open a ticket and track these changes for the upcoming PowerSC release.

    ------------------------------
    Bhargavi Reddy
    ------------------------------



  • 6.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Tue November 09, 2021 12:11 AM
    Super! Thanks Bhargavi!

    Br,
    Tommi

    ------------------------------
    Tommi Sihvo, Lead Service Architect
    TietoEVRY, Compute Services
    email tommi.sihvo@tieto.com mobile +358 (0)40 5180 Finland
    ------------------------------



  • 7.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Thu April 21, 2022 10:20 AM

    According to development:

    CIS for AIX 7.2 will be implemented in the second half of this year.

    We want a CIS profile for IBMi also, but ther is a "best practices" profile only.

    I had to create an Idea (rfe) for that on request of development.: Add CIS (benchmark) compliance profile for | IBM Power Ideas Portal

    Vote please, thanks!

    Emiel van ter Beek



    ------------------------------
    Emiel van ter Beek
    ------------------------------