Commit graph

39 commits

Author SHA1 Message Date
Mark Bolwell
40078515fe
updated 1.4.2 thanks to @brent-bean #300
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-02-26 11:01:35 +00:00
Mark Bolwell
c178cba7bc
Updated comments
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-29 13:53:58 +00:00
Mark Bolwell
88ac5c3d65
Lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 11:49:02 +00:00
Mark Bolwell
bab28dda45
Added further aide variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-10 17:28:49 +00:00
Mark Bolwell
2827c752ac
aide variablizing
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-10 16:45:49 +00:00
Mark Bolwell
5f94f60e69
Updated audit steps and added ARM support
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-08-13 08:25:10 +01:00
Mark Bolwell
671ba154e7
linting updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-08-09 13:47:38 +01:00
Mark Bolwell
fd3b9703e3
tidy up and realign
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-08-09 13:14:56 +01:00
Mark Bolwell
42aa624d50
updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-07-24 14:01:40 +01:00
Mark Bolwell
8b58d71e4b
section1 v2 initial
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-07-19 17:01:23 +01:00
Mark Bolwell
54e4ee1588
update audit output and remove jmespath
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-07-11 17:02:38 +01:00
uk-bolly
f8fcfe0e78
April_24 updates (#201)
* Issue #170, PR #181 thanks to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* issue #182, PR #183 thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PR #180 thanks to @ipruteanu-sie and @raabf

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Addressed PR #165 thanks to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PT #184 addressed thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated credits

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* typo and ssh allow_deny comments

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* enable OS check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PR - #198 addressed thanks to @brakkio86

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Addressed issue #190

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Additional vars for issue #190

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated pre-commit version

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* consistent quotes around mode

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* moved audit added discoveries

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* removed unneeded vars

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* audit moved to prelim

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tidy up

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* improved new variable usage

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed logic 6.2.10

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* addressed #197 thanks to @mark-tomich

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updates for audit section

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed naming

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* added prelim to includes

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-04-15 14:02:07 +01:00
uk-bolly
40bc7aa082
Feb24 updates (#179)
* change logic thanks to @rjacobs1990 see #175

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* thanks to @ipruteani-sie #134

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Thanks to @stwongst #125

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* thanks to @sgomez86 #146

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Added updates from #115

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* removed rp_filter in post added in error

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated yamllint precommit

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated fqcn fo json_query

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fix typo for virt type query

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-02-20 15:43:43 +00:00
Mark Bolwell
dc7da70b61
fixed typo
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-11-21 12:37:09 +00:00
Mark Bolwell
669f535225
updated benchmark name
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-11-21 12:28:52 +00:00
Mark Bolwell
afd1c2ff01
fixed benchmark_name
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-11-21 10:11:50 +00:00
Mark Bolwell
23a4386e95
addition of audit_only config
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-11-21 09:49:36 +00:00
Mark Bolwell
43a339c74f
new var rhel9cis_rhel_default_repo
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-07 14:23:12 +01:00
Mark Bolwell
81f580c5c0
added centos wording
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-08-01 16:55:42 +01:00
Mark Bolwell
82eedb0edf
updated case for module
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-06-06 18:40:11 +01:00
Mark Bolwell
674d3417ff
rule_1.10 updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-06-06 14:36:38 +01:00
Mark Bolwell
42b9dc9e89
Linting
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-03-20 15:16:15 +00:00
Mark Bolwell
599c6db3e1
fix typo
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-03-10 08:18:18 +00:00
Mark Bolwell
e04da88df4
Added OracleLinux support
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-03-06 11:22:08 +00:00
Mark Bolwell
c061a35b31
created new gpg_key_package variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-03-06 11:21:08 +00:00
Mark Bolwell
cb0a4e71cd
fixed version
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-27 12:21:26 +00:00
Mark Bolwell
c0d25d67cf
updated ansible min version
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-27 11:03:47 +00:00
Mark Bolwell
acf0104f7a
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-13 12:10:18 +00:00
Mark Bolwell
28bbc2ff5f
1.2.2 rpm gpg key check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-07-25 11:26:27 +01:00
Mark Bolwell
22326c5de6
Add blank row
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-07-25 11:24:50 +01:00
Mark Bolwell
df14771993
updated with alma vars
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-07-20 17:13:57 +01:00
Mark Bolwell
6b6a4a32c8
added warning count
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-07-20 17:13:33 +01:00
Mark Bolwell
a8602689b8
updated issues and added improvements
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-04-25 16:58:11 +01:00
Mark Bolwell
13a6746997
lint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-04-05 10:24:47 +01:00
Mark Bolwell
2d21f8a98e
tidy up vars
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-04-01 17:09:53 +01:00
Mark Bolwell
f0c4701dbd
updated controls
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-04-01 15:26:13 +01:00
uk-bolly
ac744cb5ae
Collections (#7)
* added collections requiremenst for tower integration

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* added crypto & posix

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* removed older files

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated workflow uses rocky8

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated tags

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated ansible ver

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated discord info

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-03-02 13:19:54 +00:00
uk-bolly
02a36f7f8d
Fix in logic for Alma (#4)
* container standards

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* logic on handlers

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* initial container ignore

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tags and containder discovery

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* logic on auditd task

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tags and crypto logic

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* distro update for rocky

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* system_is_container updates

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* ssh pkg check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* logrotate pkg check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* logic in container check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* add pkg fact and audit conditionals

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tidy up crypto step

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Added missing tags

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* container vars file now a variable

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* added uid discovery and usage

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Updated OS checks and conditionals

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed empty become

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* change audit to include task

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Added OS_specific vars

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated import/include

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* OS Specific vars

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated tags

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated changed_when

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed UID logic

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* changed reboot var

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* changed skip_reboot var name

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* masked only

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fix logic

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* remove debug update logic 6.2.8

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* initial

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* removed CentOS

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-02-02 11:25:03 +00:00
Mark Bolwell
a54b5216eb
Initial
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-01-07 09:06:18 +00:00