Ionut Pruteanu
|
ca41b128cd
|
Defining some threshold for (audit_)space_left vars, as well as a bool which governs if extra params will be configured
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-20 22:21:14 +02:00 |
|
Ionut Pruteanu
|
88ffe32137
|
Storing max_log_file under rhel9cis_auditd dict variable.
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-20 21:58:49 +02:00 |
|
Mark Bolwell
|
8784941179
|
audit variables seperated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-11-21 09:48:49 +00:00 |
|
Mark Bolwell
|
11071a66ab
|
added pragma allowed
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-21 15:36:05 +01:00 |
|
Mark Bolwell
|
f6fd7e02d3
|
git audit binary version updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-18 14:02:44 +01:00 |
|
Mark Bolwell
|
43a339c74f
|
new var rhel9cis_rhel_default_repo
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-07 14:23:12 +01:00 |
|
Mark Bolwell
|
18e59d32f1
|
more ansible_facst referenced #54
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-09-06 09:55:27 +01:00 |
|
Mark Bolwell
|
60e2ec5795
|
Added comment for os_check var
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-08-10 13:55:18 +01:00 |
|
Mark Bolwell
|
009c9fc498
|
updated audit vars naming, AMD & ARM binaries
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-07-28 15:16:50 +01:00 |
|
Mark Bolwell
|
e19402d613
|
updated comment
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-07-05 13:01:56 +01:00 |
|
Mark Bolwell
|
12c5d6e813
|
update comment
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-06-28 11:46:08 +01:00 |
|
Mark Bolwell
|
674d3417ff
|
rule_1.10 updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-06-06 14:36:38 +01:00 |
|
Jimmy Conner
|
626c76236a
|
Fix Policy Number for Grub Boot Password
Signed-off-by: Jimmy Conner <jconner@redhat.com>
|
2023-05-31 10:56:33 -05:00 |
|
Mark Bolwell
|
42b9dc9e89
|
Linting
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-03-20 15:16:15 +00:00 |
|
Mark Bolwell
|
868e74bbf4
|
issue 41 5.3.7 tasks
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-03-13 09:44:51 +00:00 |
|
Mark Bolwell
|
58d3bb4e41
|
updated var naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-03-01 09:17:38 +00:00 |
|
Mark Bolwell
|
a28c0531ee
|
align audit release
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-02-20 14:02:49 +00:00 |
|
Mark Bolwell
|
a14e9c5dbe
|
#30 thanks to @smatterchew sshd config file dropin ability
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-02-20 11:31:46 +00:00 |
|
Mark Bolwell
|
e5ce163fcf
|
new option to 6_2_16 not follow symlinks
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-02-14 08:54:21 +00:00 |
|
Mark Bolwell
|
bf83a6b84c
|
Add more safety around control 5.4.2
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-27 12:19:16 +00:00 |
|
Mark Bolwell
|
7d426bd497
|
Added # comment
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-26 16:03:17 +00:00 |
|
Mark Bolwell
|
032e73348a
|
removed vars not used any longer
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-23 17:01:27 +00:00 |
|
Mark Bolwell
|
fdf298328c
|
documented 1.2.4 for rhel
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-20 17:14:24 +00:00 |
|
Mark Bolwell
|
5eb72bc544
|
updated banner message
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-20 11:21:31 +00:00 |
|
Mark Bolwell
|
de88c96f24
|
section 1.8 alignment v1.0.0
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-20 10:29:50 +00:00 |
|
Mark Bolwell
|
499b67ceb2
|
Updated rsyslog server variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-19 14:51:30 +00:00 |
|
Mark Bolwell
|
999d7b5b1e
|
fix csv sugroup option updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-19 13:33:11 +00:00 |
|
Mark Bolwell
|
9e9e3abc43
|
changed default grub password
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-18 16:29:03 +00:00 |
|
Mark Bolwell
|
bc90630ca8
|
git add set bootloader & gossupdates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-18 16:21:51 +00:00 |
|
Mark Bolwell
|
e17acee56d
|
fixed variables
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-13 13:59:15 +00:00 |
|
Mark Bolwell
|
0c279ad97d
|
new control 5.6.6 added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-13 09:09:49 +00:00 |
|
Mark Bolwell
|
e62e5630b4
|
section 4 updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2023-01-12 11:38:53 +00:00 |
|
Mark Bolwell
|
1d96539637
|
Exentsion to auditd
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-10-14 12:29:06 +01:00 |
|
Mark Bolwell
|
4fe4346f35
|
updated audit filename
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-10-14 12:09:14 +01:00 |
|
Mark Bolwell
|
d3d819b0a0
|
changed default git_branch to devel
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-09-16 14:24:31 +01:00 |
|
Mark Bolwell
|
962319fcce
|
changed audit dir to opt
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-09-16 11:52:55 +01:00 |
|
Mark Bolwell
|
5ba2c41851
|
updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-07-26 11:13:29 +01:00 |
|
Mark Bolwell
|
de4a7c5bf2
|
removed empty row
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-07-25 11:24:07 +01:00 |
|
Mark Bolwell
|
d2684c1e9d
|
auditd, sysctl vars goss version update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-06-20 17:05:23 +01:00 |
|
Adam Lewandowski
|
581eb70b48
|
Restore rhel9cis_pam_faillock.remember, as it is used by rules 5.5.3 and 5.5.4
Signed-off-by: Adam Lewandowski <adam.lewandowski@plxis.com>
|
2022-05-06 11:04:23 -04:00 |
|
Adam Lewandowski
|
62649cb6c5
|
Updated rhel9cis_pam_faillock defaults to only those needed for RHEL9
Signed-off-by: Adam Lewandowski <adam.lewandowski@plxis.com>
|
2022-05-06 11:04:23 -04:00 |
|
Adam Lewandowski
|
85afda6413
|
Add missing variable defaults for 'rhel9cis_pam_faillock'
Signed-off-by: Adam Lewandowski <adam.lewandowski@plxis.com>
|
2022-05-06 11:04:23 -04:00 |
|
Mark Bolwell
|
627f6e291d
|
updated environment options
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-05-03 10:22:00 +01:00 |
|
Mark Bolwell
|
a8602689b8
|
updated issues and added improvements
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-04-25 16:58:11 +01:00 |
|
Mark Bolwell
|
f66d271cee
|
controlid updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-04-11 17:39:30 +01:00 |
|
Mark Bolwell
|
b8bb7912a1
|
removed iptables - not valid in rh9
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-04-06 17:29:57 +01:00 |
|
Mark Bolwell
|
7374c37510
|
updates var naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-04-06 16:31:57 +01:00 |
|
Mark Bolwell
|
e9d212437a
|
firewall pkgs to masked as default
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-04-05 13:07:36 +01:00 |
|
Mark Bolwell
|
13a6746997
|
lint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-04-05 10:24:47 +01:00 |
|
Mark Bolwell
|
2bf95bf3da
|
default mask nftable for firewalld
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2022-04-05 10:08:42 +01:00 |
|