Commit graph

56 commits

Author SHA1 Message Date
Joachim la Poutré
e0491ccb8f
Update cis_6.2.x.yml
Corrected tag: rule_6.2.3

Signed-off-by: Joachim la Poutré <14360383+sickbock@users.noreply.github.com>
2024-01-03 11:20:08 +01:00
Joachim la Poutré
d6b44aac70
Update cis_6.1.x.yml
Corrected tags: rule_6.1.8 & rule_6.1.12

Signed-off-by: Joachim la Poutré <14360383+sickbock@users.noreply.github.com>
2024-01-03 11:18:52 +01:00
Mark Bolwell
e82b2cefac
quoted file mode
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-21 16:25:59 +01:00
Mark Bolwell
580ee762ee
fix filename
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-21 15:35:35 +01:00
Mark Bolwell
e5d17f74ca
import_tasks file added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-21 15:08:37 +01:00
Mark Bolwell
c5ed197e03
import_tasks file added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-21 15:07:52 +01:00
Mark Bolwell
a67a484971
import_tasks file added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-21 14:55:55 +01:00
Mark Bolwell
04cb2e0f1d
#54 merged into new layout
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-06 08:44:23 +01:00
Mark Bolwell
c9db12b603
updated lint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-07-26 16:58:33 +01:00
Mark Bolwell
0ad7bf4848
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-07-26 16:50:48 +01:00
Marco V
cfe7f8c852
Refactored the when statement layout
Signed-off-by: Marco V <marco@osp.nl>
2023-07-24 17:56:03 +02:00
c59099
9e8ecee964
- Added extra checks in using loop items in when statement
- Fixed typo in handler name

Signed-off-by: Marco V <marco@osp.nl>
2023-07-24 17:56:03 +02:00
Mark Bolwell
a5df4c2f38
fix_typos
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-04-13 09:23:10 +01:00
Mark Bolwell
120a0ea751
updated layout
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-04-12 13:10:42 +01:00
Mark Bolwell
b9e17f74d1
updated controls
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-04-12 13:05:26 +01:00
Mark Bolwell
e5ce163fcf
new option to 6_2_16 not follow symlinks
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-02-14 08:54:21 +00:00
Mark Bolwell
939102430c
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-27 14:03:32 +00:00
Mark Bolwell
a759c38902
removed split filter allowing old ansible versions
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-27 11:03:23 +00:00
Mark Bolwell
aa5b2c30c4
6.2.8 rewrite
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-26 15:01:12 +00:00
Mark Bolwell
60f832f1b2
control updates and lint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-26 12:10:23 +00:00
Mark Bolwell
e61ef2c1a6
blank space and tidy
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-26 09:48:10 +00:00
Mark Bolwell
e389ac16a0
removed blank space
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-26 09:47:53 +00:00
Mark Bolwell
abd99426b8
replaced dest for path on file module
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-26 09:31:27 +00:00
Mark Bolwell
0c460d4b70
updated task 6.2.8
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-26 08:31:12 +00:00
Mark Bolwell
3c33ce5056
with_items to loop
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-25 09:47:26 +00:00
Mark Bolwell
0350e234fe
rhel_09 updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-24 11:02:32 +00:00
Mark Bolwell
b5c57abc33
removed congrats statement
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-24 10:23:39 +00:00
Mark Bolwell
02113b783a
Addec changed_when 6.2.1
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-20 13:36:34 +00:00
Mark Bolwell
45435dd2ba
updated 6.2.16
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-19 16:55:12 +00:00
Mark Bolwell
77e48d3ecc
6.2.11 nologin to exclude & fixed tag
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-19 16:29:44 +00:00
Mark Bolwell
cb609c1f1a
fqcn update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-19 13:31:53 +00:00
Mark Bolwell
e87cc3ade5
Removed -automated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-13 14:16:27 +00:00
Mark Bolwell
50d4cd83aa
Removed -automated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-13 14:15:50 +00:00
Mark Bolwell
acf0104f7a
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-13 12:10:18 +00:00
Mark Bolwell
3ead0d63ac
warn control count updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-13 11:05:25 +00:00
Mark Bolwell
440f1dfcd4
reorder and lint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-13 10:04:33 +00:00
Mark Bolwell
198359cfbb
reorder and lint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-13 10:04:16 +00:00
Mark Bolwell
bcc5922832
removed args
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-12 15:02:18 +00:00
Mark Bolwell
e764ef55d5
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-10-14 12:14:03 +01:00
Kristian
fc407f8329
tss user and spacing
Signed-off-by: Kristian <kris9854@gmail.com>
2022-09-27 17:15:49 +02:00
Mark Bolwell
3df35e03a0
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-09-16 11:34:42 +01:00
Mark Bolwell
6777a88719
fix logic in warning
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-07-25 14:52:26 +01:00
Mark Bolwell
6b6a4a32c8
added warning count
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-07-20 17:13:33 +01:00
Mark Bolwell
2c4718fb75
fix title
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-06-07 10:07:19 +01:00
Mark Bolwell
93e3f7bf46
conditional and warning msg std
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-05-11 11:20:12 +01:00
Mark Bolwell
13a6746997
lint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-04-05 10:24:47 +01:00
Mark Bolwell
9a0ac22331
fix tag typo
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-04-04 16:20:27 +01:00
Mark Bolwell
f0c4701dbd
updated controls
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-04-01 15:26:13 +01:00
Mark Bolwell
c6caa90059
updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-03-30 16:18:11 +01:00
uk-bolly
9db4b7fd81
Improvements (#5)
* container standards

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* logic on handlers

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* initial container ignore

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tags and containder discovery

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* logic on auditd task

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tags and crypto logic

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* distro update for rocky

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* system_is_container updates

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* ssh pkg check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* logrotate pkg check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* logic in container check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* add pkg fact and audit conditionals

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tidy up crypto step

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Added missing tags

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* container vars file now a variable

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* added uid discovery and usage

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Updated OS checks and conditionals

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed empty become

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* change audit to include task

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Added OS_specific vars

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated import/include

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* OS Specific vars

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated tags

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated changed_when

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed UID logic

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* added github templates

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated layout

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Added .github ignore again

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-02-02 11:34:50 +00:00