Commit graph

167 commits

Author SHA1 Message Date
defnotyujine
e6ccdea365
Updated Jinja template to fix compliance issues for control 5.3.3.2.7
Signed-off-by: defnotyujine <batauling1000@gmail.com>
2026-03-09 19:19:02 +08:00
uk-bolly
3015e2fe2f
Merge branch 'devel' into pub_feb26_updates
Signed-off-by: uk-bolly <69214557+uk-bolly@users.noreply.github.com>
2026-02-12 09:54:10 +00:00
Mark Bolwell
032c75924e
Tidy up 5.3.2.1
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-12 09:49:52 +00:00
Frederick Witty
11becb32c5
QA Fixes
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-02-10 16:01:05 -05:00
uk-bolly
d3f24d9d94
Merge pull request #420 from bol7742/patch-1
fix: make 5.3.2.2 idempotent with 5.3.3.1.1
2026-01-22 08:48:38 +00:00
Frederick Witty
309ff4cdd7
Fixes from Public Issue 418 and 419 + Lic year
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:08:35 -05:00
Frederick Witty
22a9b085d7
fix for #419, thank you @aaronk1
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 12:23:40 -05:00
bol7742
f15407dcb4
fix: make 5.3.2.2 idempotent with 5.3.3.1.1
Signed-off-by: bol7742 <102948121+bol7742@users.noreply.github.com>
2025-12-22 11:28:49 +01:00
Mark Bolwell
6500e39f42
Added fix for #399 thanks to @trumbaut
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-03 08:19:07 +01:00
Mark Bolwell
8f1aba35f6
added fix for public #399
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-03 08:13:35 +01:00
Mark Bolwell
d2b371432e
issue #393 addressed thanks to @fragglexarmy
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-01 10:32:52 +01:00
Mark Bolwell
d63f58972d
fixed typo
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-01 10:32:24 +01:00
uk-bolly
23b60bc629
Merge pull request #390 from polski-g/modular_section_5_r2
Support section modularization (for Sec 5 only right now)
2025-10-01 10:24:44 +01:00
uk-bolly
3e848dd6f1
Merge pull request #386 from polski-g/regex_5_3_2_2
5.3.2.2: fix regex failing to match whitespace
2025-10-01 10:24:13 +01:00
Mark Bolwell
5f64ccd843
5.3.2.1 updated var naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 15:20:23 +01:00
Mark Bolwell
0d56df1eda
5.4.1.3 typo fix thanks to @fragglexarmy
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:53:17 +01:00
Mark Bolwell
7769bec99e
Added section5 subsections public #390 thanks to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:44:57 +01:00
Mark Bolwell
caffb14671
applied latest fix from public #386 thansk to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:38:45 +01:00
polski-g
2557470054
5.3.2.2: fix regex failing to match whitespace
Fixed yamllint (colons) issues

Signed-off-by: polski-g <polski_g@sent.at>
2025-09-15 13:04:29 -04:00
polski-g
392c3f9016
Support section 5 modularization
corrected trailing whitespace

Signed-off-by: polski-g <polski_g@sent.at>
2025-09-15 12:59:41 -04:00
Frederick Witty
67c574d8a9
Updates from Public
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-10 12:57:50 -04:00
Fred W.
92bba62586
Merge pull request #385 from polski-g/check_mode_5_4_1_1
5.4.1.1: shell command should run in check_mode
2025-09-10 08:50:49 -04:00
Frederick Witty
e61cafb59b
addressed issue #387, thank you @fragglexarmy
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-09 15:59:30 -04:00
Frederick Witty
2dfa9266a8
Update cryto policy var to standard
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-08 11:54:57 -04:00
Frederick Witty
413ccb96b7
Update cryto policy based controls with improved logic
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-05 16:39:55 -04:00
polski-g
88507f9516
5.4.1.1: shell command should run in check_mode
Signed-off-by: polski-g <polski_g@sent.at>
2025-08-28 13:15:29 -04:00
Mark Bolwell
f0fb701122
updated var naming on 5.4.2.5
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-08-15 16:10:37 +01:00
Mark Bolwell
eafee7e040
Added typo updates thanks to @DianaMariaDDM
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-08-14 17:19:53 +01:00
uk-bolly
feb183553c
Merge pull request #367 from siemens/siemens/rhel9_v2_fixing_inconsistencies
Fixing minor inconsistencies
2025-07-18 14:34:22 +01:00
Tomuta, Diana Maria (T CST SCC-RO)
4329591c90
Fixing inconsistencies between rule ids in title, tags and when.
Signed-off-by: Diana-Maria Dumitru <diana.dumitru@siemens.com>
2025-07-08 09:37:29 +03:00
Mark Bolwell
3778d6fb62
improvement updated with public #361
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-07-04 11:34:53 +01:00
Tomuta, Diana Maria (T CST SCC-RO)
a556750894
Fixing issue https://code.siemens.com/infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis/-/issues/41.
Signed-off-by: Diana-Maria Dumitru <diana.dumitru@siemens.com>
2025-07-03 13:03:08 +03:00
Mark Bolwell
f892525a7c
5.1.10 and 5.1.11 updated variable naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:19:18 +01:00
Mark Bolwell
02008339b4
updated regex
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:18:22 +01:00
Mark Bolwell
18fc4ea585
updated conditional var name and regex best practices
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 10:08:56 +01:00
uk-bolly
f70821bf7e
Merge pull request #340 from ansible-lockdown/interactive_user_update
Updated variable naming for interactive_users
2025-05-28 18:42:20 +01:00
Mark Bolwell
3197252611
Merge branch 'benchmark_v2.0.0' into interactive_user_update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 16:14:18 +01:00
Mark Bolwell
2256456f0e
align with public fixes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 16:12:31 +01:00
Mark Bolwell
97abfaf9f8
updated passwd variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 15:41:12 +01:00
Mark Bolwell
5dc2541731
Updated passwd variable name
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 14:57:29 +01:00
Mark Bolwell
f29fc9088c
fixed var naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 10:53:32 +01:00
Mark Bolwell
d136bfa381
Updated variable naming for interactive_users
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 10:22:30 +01:00
polski_g
f564135e72
Check for existence of sshd_config.d/50-redhat.conf before trying to modify it
Signed-off-by: polski-g <polski_g@sent.at>
2025-05-23 12:32:02 -04:00
Mark Bolwell
f83e5a69a2
interactive users ilogic improvements thanks to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 16:05:01 +01:00
Mark Bolwell
cc48a0d0b5
Interactive user discovery improve thanks to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 15:53:03 +01:00
Mark Bolwell
ce43c573ee
update tags and issue #311 thanks to @rilatu
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-15 12:54:34 +01:00
Mark Bolwell
ec57b85fdf
Updated 5.3.3.1.1 regex issue #315 thanks to @jrdbarnes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-15 11:11:19 +01:00
Mark Bolwell
5a612675e2
improve authselect logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-02-26 14:04:01 +00:00
Mark Bolwell
48a471a037
issue #296 thanks to @dbsanders
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-02-26 08:23:53 +00:00
Mark Bolwell
761f8517c4
fix spacing
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-30 15:34:42 +00:00