PowerSC

 View Only
Expand all | Collapse all

About AIX CIS benchmark & Tools + PowerSC

  • 1.  About AIX CIS benchmark & Tools + PowerSC

    IBM Champion
    Posted Thu November 04, 2021 02:22 AM

     I noticed CIS AIX 7.1 v2.0.0 benchmark was published a while ago

    We are using CIS benchmarks as Standard security baseline for our AIX servers, so I'm always interested how different benchmarks & Tools are aligned,

    so if possible, I would have some questions: 


    • How about the PowerSC 2.0.1 AIX CIS template, is it based already on the new benchmark?

    • And what is the status for AIX72 (and upcoming AIX73) benchmarks? To be honest, I feel bit bad when needed to refer to AIX71 benchmarks in Security Audit, customer queries etc occasions for AIX72 environments.. 

    Thanks for replies already beforehand!



    ------------------------------
    Tommi Sihvo, Lead Service Architect
    TietoEVRY, Compute Services
    email tommi.sihvo@tieto.com mobile +358 (0)40 5180 Finland
    ------------------------------


  • 2.  RE: About AIX CIS benchmark & Tools + PowerSC

    IBM Champion
    Posted Fri November 05, 2021 04:01 AM
    Hi Tommi,

    yes, the new benchmark for AIX 7.1 was published 1 month ago. CIS CAT Assessor should be updated already. Did you check CIS site?

    Regarding AIX 7.2 benchmark, it is now in work and I hope it will be published until end of the year. I didn't hear about any plans for AIX 7.3 benchmark and I think, the earliest possible date will be Q3 2022.

    Best regards
    Andrey

    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 3.  RE: About AIX CIS benchmark & Tools + PowerSC

    IBM Champion
    Posted Fri November 05, 2021 04:06 AM
    replying to myself :-) I checked the CIS site now and yes, there is no XML file for CIS CAT. I opened a ticket.

    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 4.  RE: About AIX CIS benchmark & Tools + PowerSC

    IBM Champion
    Posted Fri November 05, 2021 04:09 AM
    Thanks Andrey! :)

    Yes, noticed your comment on CIS site; and yes..I did check the cis cat full ; old xml benchmark there.. :)
    Thanks for AIX72 info + pushing this xml issue! 
    Br,
    tommi

    ------------------------------
    Tommi Sihvo, Lead Service Architect
    TietoEVRY, Compute Services
    email tommi.sihvo@tieto.com mobile +358 (0)40 5180 Finland
    ------------------------------



  • 5.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Tue October 11, 2022 10:36 AM

    Hello

    did you have some news about the plans for for AIX 7.3 benchmark?

    Thanks



    ------------------------------
    Osmar D'Addamio
    ------------------------------



  • 6.  RE: About AIX CIS benchmark & Tools + PowerSC

    IBM Champion
    Posted Tue October 11, 2022 11:39 AM
    Hi Osmar,

    as far as I remember our last conversation with Michael Felt, there was no idea to publish a separate AIX 7.3 benchmark. He wanted to finish AIX 7.2 benchmark (and did it on September 30), and then start working on more generalized AIX 7.x benchmark, which should be for AIX 7.1, 7.2 and 7.3. As far as I see it now on CIS site, he already started the work.

    Best regards
    Andrey

    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 7.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Tue February 28, 2023 09:53 AM

    Hi Andrey
    did you have any update about the more generalized AIX 7.x benchmark?
    Did you know if it will be released soon or when?

    Thanks

    Best regards

    Osmar



    ------------------------------
    Osmar D'Addamio
    ------------------------------



  • 8.  RE: About AIX CIS benchmark & Tools + PowerSC

    IBM Champion
    Posted Tue February 28, 2023 11:05 AM

    Hi Osmar,

    last time I checked they worked hard on it. But it was several months ago. Now I work on some other topics and don't participate anymore in the work on the benchmark. You can create an account on https://workbench.cisecurity.org/ and help Michael and others to make the new benchmark.



    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 9.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Wed March 01, 2023 06:53 AM

    Hi! Osmar, 

        Benchmark recommendations for AIX 7.x are in progress and we don't have a confirmed date on the release yet. Have a meeting today. Will get an update and post it on this channel.



    ------------------------------
    Bhargavi Reddy
    ------------------------------



  • 10.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Mon November 08, 2021 09:25 AM
    PowerSC 2.0.0.1 was released on Oct 15th  just a few days after the benchmark was published (Oct 4th). We will open a ticket and track these changes for the upcoming PowerSC release.

    ------------------------------
    Bhargavi Reddy
    ------------------------------



  • 11.  RE: About AIX CIS benchmark & Tools + PowerSC

    IBM Champion
    Posted Tue November 09, 2021 12:11 AM
    Super! Thanks Bhargavi!

    Br,
    Tommi

    ------------------------------
    Tommi Sihvo, Lead Service Architect
    TietoEVRY, Compute Services
    email tommi.sihvo@tieto.com mobile +358 (0)40 5180 Finland
    ------------------------------



  • 12.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Thu April 21, 2022 10:20 AM

    According to development:

    CIS for AIX 7.2 will be implemented in the second half of this year.

    We want a CIS profile for IBMi also, but ther is a "best practices" profile only.

    I had to create an Idea (rfe) for that on request of development.: Add CIS (benchmark) compliance profile for | IBM Power Ideas Portal

    Vote please, thanks!

    Emiel van ter Beek



    ------------------------------
    Emiel van ter Beek
    ------------------------------



  • 13.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Fri July 29, 2022 09:34 AM
    Estimados 

    Buenas noches, le saluda Marlon desde Ecuador, pude ver su comentario dentro de la pagina community.ibm.com; la razón de mi correo es para consultarle si por si acaso conoce de la existencia del archivo XML que esté orientado CIS AIX 7.1 v2.0.0; de lo que he revisado solo encuentro la plantilla: CIS_IBM_AIX_7.1_Benchmark_v1.1.0.xml; disculpen si le consulto esto pero veo que ustedes están más al tanto de estos temas.

     

    Revisé dentro del portal https://workbench.cisecurity.org/; pero solo encontré la plantilla xml v1.1.0

     

    De antemano muchas gracias por su respuesta.

     

    Saludos Cordiales.
    Marlon Vela 
    Correo: mvela@tecnoav.com



    ------------------------------
    Marlon Vela
    ------------------------------



  • 14.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Thu October 13, 2022 06:35 AM
    Hi,
    .
    The CIS IBM AIX 7.1 Benchmark v2.1.0 is available at https://workbench.cisecurity.org/files/4119 but the latest version of PowerSC 2.1.0.2 still use the CISv1.xml profile, do you known how to import the CISv2 profile in PowerSC ? 
    .
    Thanks.


    ------------------------------
    -----------------------------------
    Thierry Huché
    Power Systems Brand Technical Specialist
    IBM France
    -----------------------------------
    ------------------------------



  • 15.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Thu October 13, 2022 07:25 AM

    PowerSC developers (Rocket Software) should include the CIS V2.1.0 profile and scripts in PowerSC.

    as stated last in april:
    According to development:
    CIS for AIX 7.2 will be implemented in the second half of this year.

    I don't know if they will provide the AIX 7.1 v2.1.0 CIS profile ...



    ------------------------------
    Emiel van ter Beek
    ------------------------------



  • 16.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Fri October 14, 2022 09:14 AM
    Hi! Thierry, 

      This Benchmark was published on Sep 30th 2022. Did not get an opportunity to review and upgrade the rules in PowerSC yet but is on the roadmap for 1Q2023.

    ------------------------------
    Bhargavi Reddy
    ------------------------------



  • 17.  RE: About AIX CIS benchmark & Tools + PowerSC

    Posted Fri October 14, 2022 09:44 AM
    Hi Bhargavi,

    You mean the AIX 7.1 CIS profile?

    When will AIX 7.2 CIS profile be available?

    Regards,

    ------------------------------
    Emiel van ter Beek
    ------------------------------



  • 18.  RE: About AIX CIS benchmark & Tools + PowerSC

    IBM Champion
    Posted Mon October 17, 2022 01:44 AM
    Hi,


    If I would be my call...I would put efforts directly to AIX 7.3 (and have backwards compatible with 7.2) rather than doing anything anymore for 7.1 or 7.2 .... 

    We all know that AIX is secure as it can be, but it does not help you in cases where you need to ensure the same for some new customers who do not AIX that much >> They will ask about the security etc, and it will definitely not be too convincing & "street creditable" to say "Yes, we are using CIS standard benchmark...originated from AIX7.1...from year 2013.."   << No wonder some people have the feeling of AIX being in sunsetting mode.   :( 

    Br,
    tommi

    ------------------------------
    Tommi Sihvo, Lead Service Architect
    Tietoevry, Compute Services
    email tommi.sihvo@tietoevry.com mobile +358 (0)40 5180 Finland
    ------------------------------