sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

updated

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-01-26 15:03:05 +00:00
parent aa5b2c30c4
commit 849789b867
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
2 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
Changelog.md
View file

@ -7,6 +7,8 @@
Jan-2023 release Jan-2023 release
- Lint file updates and improvements - Lint file updates and improvements
- auditd now shows diff ater initial template added
- many control rewritten
- Many controls moved ID references - Many controls moved ID references
- Audit updates aligned - Audit updates aligned
- Command warn arg removed - Command warn arg removed
@ -15,7 +17,7 @@ Jan-2023 release
- fqcn added to all controls - fqcn added to all controls
- some controls rewritten using module rather than shell - some controls rewritten using module rather than shell
- typo fixes from rhel_08 inheritance - typo fixes from rhel_08 inheritance
- workfolw update for 5.6.6 to set random root password to allow for testing - workflow update for 5.6.6 to set random root password to allow for testing
- incorporates issues - incorporates issues
- #23 - #23
- #24 - #24

3
README.md
View file

@ -86,6 +86,7 @@ Below is an example of the tag section from a control within this role. Using th
### Known Issues ### Known Issues
CIS 1.2.4 - repo_gpgcheck is not carried out for RedHat hosts as the default repos do not have this function. Rocky and Alma not affected. CIS 1.2.4 - repo_gpgcheck is not carried out for RedHat hosts as the default repos do not have this function. This also affect EPEL(not covered by var).
- Rocky and Alma not affected.
Variable used to unset. Variable used to unset.
rhel9cis_rhel_default_repo: true # to be set to false if using repo that does have this ability rhel9cis_rhel_default_repo: true # to be set to false if using repo that does have this ability