2022-01-07 09:06:18 +00:00
|
|
|
# Changes to rhel9CIS
|
|
|
|
|
|
2022-07-26 11:13:29 +01:00
|
|
|
## 0.4
|
|
|
|
|
|
|
|
|
|
- RockyLinux now supported
|
|
|
|
|
- workflow updates
|
|
|
|
|
- selinux regexp improvements
|
|
|
|
|
- warning summary now at end of play
|
|
|
|
|
- advanced auditd options to exclude users in POST section
|
2022-08-23 12:22:46 +01:00
|
|
|
- Issues fixed thanks to fgierlinger
|
|
|
|
|
- [#21](https://github.com/ansible-lockdown/RHEL9-CIS/issues/21)
|
|
|
|
|
- [#22](https://github.com/ansible-lockdown/RHEL9-CIS/issues/22)
|
2022-07-26 11:13:29 +01:00
|
|
|
|
2022-06-20 17:08:14 +01:00
|
|
|
## 0.3
|
|
|
|
|
|
|
|
|
|
- update to auditd template
|
|
|
|
|
- uses facts and template new variable
|
|
|
|
|
- update_audit_template (default false)
|
|
|
|
|
- sysctl template updates and idempotency improvements
|
|
|
|
|
- container discovery usage improvements
|
|
|
|
|
- 3.4.1.5 discovery improvement
|
|
|
|
|
- 5.6.1.4 discovery improvement
|
|
|
|
|
- logrotate process logrotate.timer
|
|
|
|
|
- tidy up become:
|
|
|
|
|
- logic improvements
|
|
|
|
|
|
2022-04-11 17:40:50 +01:00
|
|
|
## 0.2
|
|
|
|
|
|
|
|
|
|
- not all controls work with rhel8 releases any longer
|
|
|
|
|
- selinux disabled 1.6.1.4
|
|
|
|
|
- logrotate - 4.3.x
|
|
|
|
|
- updated to rhel8cis v2.0 benchamrk requirements
|
|
|
|
|
- removed iptables firewall controls (not valid on rhel9)
|
|
|
|
|
- added more to logrotate 4.3.x - sure to logrotate now a seperate package
|
|
|
|
|
- grub path now standard to /boot/grub2/grub.cfg
|
|
|
|
|
- 1.6.1.4 from rh8 removed as selinux.cfg doesnt disable selinux any longer
|
|
|
|
|
|
2022-01-13 11:25:42 +00:00
|
|
|
## 0.1
|
|
|
|
|
|
|
|
|
|
- change to include statements
|
|
|
|
|
- prelim and package facts discovery
|
|
|
|
|
- commands module removed and moved to shell
|
2022-01-13 16:51:23 +00:00
|
|
|
- added
|
|
|
|
|
|
|
|
|
|
```yml
|
|
|
|
|
args:
|
|
|
|
|
warn: false
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
- update boolean values to true/false
|
|
|
|
|
- 3.4.2 improved checks for p[ackage presence
|
|
|
|
|
- changed to assert for OS/release and ansible version
|
2022-01-13 11:25:42 +00:00
|
|
|
|
2022-01-07 11:09:28 +00:00
|
|
|
## Initial
|
2022-01-07 09:06:18 +00:00
|
|
|
|
2022-01-07 09:23:01 +00:00
|
|
|
- based on RHEL8 currently as RH or CIS not GA
|
2022-01-07 11:09:28 +00:00
|
|
|
- Changes to systctl, auditd, aide cron changes to utilise templates - see issue #1
|
|
|
|
|
- Collection statement added to meta/main.yml using only community-general
|
|
|
|
|
- aide crontab moved to template due to module change
|
