sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity
1191 commits 2 branches 15 tags 2.5 MiB
Commit graph

72 commits

Author SHA1 Message Date
Thomas Rumbaut
7aa911b354
Update cis_3.2.x.yml (add dccp to blacklist instead of cramfs 
Signed-off-by: Thomas Rumbaut <thomas@rumbaut.be>
 2025-10-02 10:06:44 +02:00
Tomuta, Diana Maria (T CST SCC-RO)
4329591c90
Fixing inconsistencies between rule ids in title, tags and when. 
Signed-off-by: Diana-Maria Dumitru <diana.dumitru@siemens.com>
 2025-07-08 09:37:29 +03:00
polski_g
4e49532e20
Variablize network-manager package name 
Signed-off-by: polski-g <polski_g@sent.at>
 2025-05-23 12:33:55 -04:00
Mark Bolwell
7b1c8e9ef0
additional fix for #309 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2025-03-31 12:37:58 +01:00
Mark Bolwell
82f7b53a67
Merge branch 'lint_dec24' into alignment 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-12-11 13:36:08 +00:00
Mark Bolwell
88ac5c3d65
Lint updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-12-11 11:49:02 +00:00
Mark Bolwell
2de8a39cdc
updated yamllint, company naming, linting and spacing 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-12-04 12:00:12 +00:00
Mark Bolwell
14d038e8eb
renamed variables 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-09-05 17:36:07 +01:00
Mark Bolwell
f1c4d96412
lint updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-07-24 14:00:00 +01:00
uk-bolly
f8fcfe0e78
April_24 updates (#201) 
* Issue #170, PR #181 thanks to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* issue #182, PR #183 thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PR #180 thanks to @ipruteanu-sie and @raabf

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Addressed PR #165 thanks to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PT #184 addressed thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated credits

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* typo and ssh allow_deny comments

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* enable OS check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PR - #198 addressed thanks to @brakkio86

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Addressed issue #190

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Additional vars for issue #190

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated pre-commit version

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* consistent quotes around mode

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* moved audit added discoveries

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* removed unneeded vars

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* audit moved to prelim

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tidy up

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* improved new variable usage

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed logic 6.2.10

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* addressed #197 thanks to @mark-tomich

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updates for audit section

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed naming

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* added prelim to includes

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-04-15 14:02:07 +01:00
Ionut Pruteanu
81fd98e2c6
Using correct conditional for Task relying on 'firewall-cmd --get-active-zones' cmd 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2023-12-07 20:38:20 +02:00
Mark Bolwell
e82b2cefac
quoted file mode 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-21 16:25:59 +01:00
Mark Bolwell
580ee762ee
fix filename 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-21 15:35:35 +01:00
Mark Bolwell
c5ed197e03
import_tasks file added 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-21 15:07:52 +01:00
Mark Bolwell
af20f70f24
updated test 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-21 14:57:25 +01:00
Mark Bolwell
a67a484971
import_tasks file added 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-21 14:55:55 +01:00
Mark Bolwell
0ad7bf4848
lint updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-07-26 16:50:48 +01:00
Mark Bolwell
fe1bddf15b
typo fix 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-06-28 11:45:58 +01:00
Mark Bolwell
42b9dc9e89
Linting 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-20 15:16:15 +00:00
Mark Bolwell
58d3bb4e41
updated var naming 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-01 09:17:38 +00:00
Mark Bolwell
e59e72e3d1
lint 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 12:10:10 +00:00
Mark Bolwell
904d7811d4
moved when to same line 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 08:29:54 +00:00
Mark Bolwell
10a6a2e0dd
with_items to loop 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-25 11:36:12 +00:00
Mark Bolwell
7760f35161
with_items to loop 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-25 10:01:14 +00:00
Mark Bolwell
0350e234fe
rhel_09 updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-24 11:02:32 +00:00
Mark Bolwell
939a06d372
Ensure package installed 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-23 17:28:52 +00:00
Mark Bolwell
cb609c1f1a
fqcn update 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-19 13:31:53 +00:00
Mark Bolwell
184832d2ac
update blacklist 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-19 11:28:53 +00:00
Mark Bolwell
acf0104f7a
lint updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-13 12:10:18 +00:00
Mark Bolwell
3ead0d63ac
warn control count updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-13 11:05:25 +00:00
Mark Bolwell
dae7d03c34
lint 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-12 13:47:13 +00:00
Mark Bolwell
3321547bfa
lint 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-12 13:38:50 +00:00
Mark Bolwell
1b634f3193
updated for firewall 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-12 11:39:50 +00:00
Mark Bolwell
415f62faca
renamed 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-12 11:39:10 +00:00
Mark Bolwell
efc686a742
rewritten 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-10 11:20:05 +00:00
Mark Bolwell
cb0dd58df5
updated for v1.0.0 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-10 11:18:45 +00:00
Kristian
fc407f8329
tss user and spacing 
Signed-off-by: Kristian <kris9854@gmail.com>
 2022-09-27 17:15:49 +02:00
Mark Bolwell
0d155c4182
lint updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-09-16 14:08:16 +01:00
Mark Bolwell
3df35e03a0
lint updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-09-16 11:34:42 +01:00
Mark Bolwell
1992eea6da
lint updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-09-16 11:19:01 +01:00
Mark Bolwell
b842c47cd2
line spacing fixed 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-07-29 18:27:55 +01:00
Mark Bolwell
6b6a4a32c8
added warning count 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-07-20 17:13:33 +01:00
Mark Bolwell
33ebfea653
sysctl control improvements 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-06-20 17:03:18 +01:00
Mark Bolwell
c0c24ec8ef
improved test with idempotency 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-06-17 11:23:44 +01:00
Mark Bolwell
91600af889
yamllint 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-04-26 16:01:56 +01:00
Mark Bolwell
a8602689b8
updated issues and added improvements 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-04-25 16:58:11 +01:00
Mark Bolwell
b8bb7912a1
removed iptables - not valid in rh9 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-04-06 17:29:57 +01:00
Mark Bolwell
82d1d18504
consistent lineinfile usage 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-04-06 16:58:03 +01:00
Mark Bolwell
e4275b2131
updated conditional 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-04-06 16:32:25 +01:00
Mark Bolwell
13a6746997
lint 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-04-05 10:24:47 +01:00