Re: [RFC cip-dev][isar-cip-core][PATCH 12/14] Add kas file for hardening configuration

Jan Kiszka <[email protected]> Mon, 27 Jul 2026 16:45:01 +0200
Newsgroups org.cip-project.lists.cip-dev
Message-ID <[email protected]>
On 24.07.26 14:47, Quirin Gylstorff wrote:
> From: Clara Kowalsky <[email protected]>
> 
> Signed-off-by: Clara Kowalsky <[email protected]>
> Signed-off-by: Quirin Gylstorff <[email protected]>
> ---
>  kas/opt/cis-validation.yml | 19 +++++++++++++++++++
>  1 file changed, 19 insertions(+)
>  create mode 100644 kas/opt/cis-validation.yml
> 
> diff --git a/kas/opt/cis-validation.yml b/kas/opt/cis-validation.yml
> new file mode 100644
> index 0000000..0f15747
> --- /dev/null
> +++ b/kas/opt/cis-validation.yml

Why is this called "validation" when the subject is only "hardening"?

Jan

> @@ -0,0 +1,19 @@
> +#
> +# CIP Core, generic profile
> +#
> +# Copyright (c) Siemens AG, 2026
> +#
> +# Authors:
> +#  Clara Kowalsky <[email protected]>
> +#
> +# SPDX-License-Identifier: MIT
> +#
> +
> +header:
> +  version: 14
> +
> +local_conf_header:
> +  enable-hardening: |
> +    CIP_CIS_HARDENING = "1"
> +  enable-validation: |
> +    CIP_CIS_HARDENING_VALIDATION = "1"

-- 
Siemens AG, Foundational Technologies
Linux Expert Center