Joshua Hemmings
|
87d2685f4e
|
Update cis_1.1.7.x.yml
Signed-off-by: Joshua Hemmings <josh@hemmings.ch>
|
2024-01-10 16:11:27 +01:00 |
|
Joshua Hemmings
|
d73f26a7ab
|
Remove trailing comma to align with other roles
Signed-off-by: Joshua Hemmings <josh@hemmings.ch>
|
2024-01-09 09:17:00 +01:00 |
|
uk-bolly
|
6f8a95c73a
|
Merge pull request #143 from siemens/siemens/feat/4.2.1.3conditionalAndSectionHeader
Siemens/feat/4.2.1.3conditional and section header
|
2023-12-21 08:40:41 +00:00 |
|
uk-bolly
|
e545b89c7b
|
Merge pull request #145 from siemens/siemens/feat/5.4.2_addVarUsage
Using rhel9cis_authselect['options'], otherwise not used at all
|
2023-12-21 08:39:48 +00:00 |
|
Corey Reid
|
8d85f178e2
|
find hidden files in /var/log for 4.3.2
Signed-off-by: Corey Reid <corey.nathan.reid@gmail.com>
|
2023-12-17 17:36:34 +00:00 |
|
uk-bolly
|
c56ea1ac9a
|
Merge pull request #140 from siemens/siemens/feat/3.4.2.5_fixConditional
3.4.2.5 conditional fix
|
2023-12-13 08:44:08 +00:00 |
|
uk-bolly
|
82d1c2bdfb
|
Merge pull request #138 from siemens/siemens/feat/2.3.4_fixConditional
Using correct conditional for ftpd
|
2023-12-13 08:43:07 +00:00 |
|
uk-bolly
|
779c90ea0e
|
Merge pull request #136 from siemens/siemens/feat/2.2.16_fixingNFSLogicBetweenMaskingServiceVsRemovingPackage
Masking service when server package is needed
|
2023-12-13 08:42:33 +00:00 |
|
uk-bolly
|
ecbd514df1
|
Merge pull request #129 from siemens/siemens/feat/removingRedundantConditionals
Removing redundant conditional statements
|
2023-12-13 08:27:49 +00:00 |
|
Ionut Pruteanu
|
c19e350b7d
|
Using rhel9cis_authselect['options'], otherwise not used at all
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-08 16:44:30 +02:00 |
|
Ionut Pruteanu
|
e0de491263
|
whole section defined in cis_4.2.1.x.yml gets executed only when: rhel9cis_syslog == 'rsyslog', having same condition is redundant and may confuse users.
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-08 12:03:00 +02:00 |
|
Ionut Pruteanu
|
d79bba53c6
|
Rsyslog subsection corrected header(was using 4.2 logging name, instead of 4.2.1. rsyslog name)
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-08 12:01:10 +02:00 |
|
Ionut Pruteanu
|
81fd98e2c6
|
Using correct conditional for Task relying on 'firewall-cmd --get-active-zones' cmd
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-07 20:38:20 +02:00 |
|
Ionut Pruteanu
|
cd04537bf1
|
Using correct conditional for ftpd
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-07 18:58:02 +02:00 |
|
Ionut Pruteanu
|
9d988b483f
|
Masking service when server package is needed
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-07 18:10:09 +02:00 |
|
Ionut Pruteanu
|
72b503bf46
|
Removing redundant conditional statements
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-05 14:42:51 +02:00 |
|
Senih
|
cce2b25d80
|
Update cis_5.6.1.x.yml
Typo fixed from:
- rule_5.5.1.3
to:
- rule_5.6.1.3
Signed-off-by: Senih <40578755+senihucar@users.noreply.github.com>
|
2023-11-23 12:02:37 -08:00 |
|
Mark Bolwell
|
23a4386e95
|
addition of audit_only config
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-11-21 09:49:36 +00:00 |
|
Mark Bolwell
|
8784941179
|
audit variables seperated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-11-21 09:48:49 +00:00 |
|
Mark Bolwell
|
729fac3580
|
updated 5.6.5
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-22 08:44:43 +01:00 |
|
Mark Bolwell
|
e82b2cefac
|
quoted file mode
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-21 16:25:59 +01:00 |
|
Mark Bolwell
|
11071a66ab
|
added pragma allowed
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-21 15:36:05 +01:00 |
|
Mark Bolwell
|
580ee762ee
|
fix filename
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-21 15:35:35 +01:00 |
|
Mark Bolwell
|
e5d17f74ca
|
import_tasks file added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-21 15:08:37 +01:00 |
|
Mark Bolwell
|
c5ed197e03
|
import_tasks file added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-21 15:07:52 +01:00 |
|
Mark Bolwell
|
af20f70f24
|
updated test
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-21 14:57:25 +01:00 |
|
Mark Bolwell
|
a67a484971
|
import_tasks file added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-21 14:55:55 +01:00 |
|
Mark Bolwell
|
e202d4bd68
|
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-21 14:55:00 +01:00 |
|
Mark Bolwell
|
d64414ce9b
|
updated test and control
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-18 09:51:56 +01:00 |
|
Mark Bolwell
|
43a339c74f
|
new var rhel9cis_rhel_default_repo
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-07 14:23:12 +01:00 |
|
Mark Bolwell
|
04cb2e0f1d
|
#54 merged into new layout
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-06 08:44:23 +01:00 |
|
Mark Bolwell
|
73cf599e48
|
removed quotes not required
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-08-10 08:28:43 +01:00 |
|
Mark Bolwell
|
dadeeab2c7
|
updated comment on rule 1.2.1
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-08-09 11:47:54 +01:00 |
|
Mark Bolwell
|
009c9fc498
|
updated audit vars naming, AMD & ARM binaries
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-07-28 15:16:50 +01:00 |
|
Mark Bolwell
|
b631459e9b
|
fix typo in bashrc path
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-07-28 15:09:52 +01:00 |
|
Mark Bolwell
|
81b2f06dab
|
updated 5.6.5 logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-07-26 17:17:45 +01:00 |
|
Mark Bolwell
|
c9db12b603
|
updated lint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-07-26 16:58:33 +01:00 |
|
Mark Bolwell
|
0ad7bf4848
|
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-07-26 16:50:48 +01:00 |
|
Mark Bolwell
|
a791c81cf2
|
5.5.3 fix and update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-07-26 11:42:21 +01:00 |
|
Mark Bolwell
|
7c34f61d11
|
#72 improve password check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-07-26 08:50:53 +01:00 |
|
Marco V
|
cfe7f8c852
|
Refactored the when statement layout
Signed-off-by: Marco V <marco@osp.nl>
|
2023-07-24 17:56:03 +02:00 |
|
c59099
|
9e8ecee964
|
- Added extra checks in using loop items in when statement
- Fixed typo in handler name
Signed-off-by: Marco V <marco@osp.nl>
|
2023-07-24 17:56:03 +02:00 |
|
Luca Berton
|
9709779492
|
Fix 2.2.14
Corrected rule 2.2.14 Ensure dnsmasq is not installed (Automated).
Signed-off-by: Luca Berton <luca@ansiblepilot.com>
|
2023-07-06 21:30:09 +02:00 |
|
Mark Bolwell
|
fe1bddf15b
|
typo fix
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-06-28 11:45:58 +01:00 |
|
Mark Bolwell
|
612bb01895
|
fixed error in assert user password set
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-06-28 11:34:15 +01:00 |
|
Mark Bolwell
|
ddec58c419
|
#66 5.6.5 regex improvment
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-06-28 10:49:55 +01:00 |
|
uk-bolly
|
4004b1b4c3
|
Merge pull request #67 from jakejellinek/patch-1
Update cis_1.3.x.yml
|
2023-06-21 08:00:38 +01:00 |
|
jakejellinek
|
a12c75b5b7
|
Update cis_1.3.x.yml
Indentation error causing aide to not start or get validated.
Signed-off-by: jakejellinek <109655728+jakejellinek@users.noreply.github.com>
|
2023-06-20 16:33:14 +01:00 |
|
Mark Bolwell
|
194925be2f
|
consistent vars and names
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-06-07 09:24:32 +01:00 |
|
Mark Bolwell
|
cc9e047196
|
lint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-06-06 14:36:51 +01:00 |
|