Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Devel to main release stig v1r9 #188

Merged
merged 75 commits into from
Mar 20, 2023
Merged

Devel to main release stig v1r9 #188

merged 75 commits into from
Mar 20, 2023

Conversation

uk-bolly
Copy link
Member

Overall Review of Changes:
Release of stig v1r9 to main along with many improvements

Issue Fixes:
#157
#158
#159
#168
#169
#170
#171
#172
#173
#178
#179
#180
#181
#183
#185
#185

Enhancements:
Workflows
linting
audit alignment with correct atig benchmark release

How has this been tested?:
In devel
pipelines

@uk-bolly
010130 rule id update
db6238a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
030650 rule id update
3d36d00 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
040310 updated rule id
21fe439 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
010359 rule ID and aid initiate
35abf2a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
010360 mail location and rule id
b4e25cd 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
010370 rule id update
16d812d 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
010490 default permissions and rule ID update
d9a385a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
010510 rule removed
94a269c 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
010740 ruleid update
87de20b 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
20040 - tmux lock key and ruleid
f37af7f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
020041 - ruleid update
506342f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
new rule 040342 FIPS KEX sshd
48c9eac 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated release version
f69d60a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated checkout action version
077173a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
improved aide testing and comment
551afbf 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated title
8ff379e 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated banner var
66ae756 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated goss version
bb8c660 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
10359 tidy up as aide init in handler
c5bc71c 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated date for release
4c62207 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
fix typo 040342
c461293 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated goss url
95aeb6f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
#158 thanks to @JosephHoffman
239275a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
#157 thanks to @parrjd
f03e4c0 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated variable
0ab4035 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
added initial with stdout_callback set to yaml for easier reading
0f92e8a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
moved skipped reboot warning
09c9ef2 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Added galaxy update workflow for main
a9b4976 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated alma image 8.7 us east2
102dda5 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
#159 fapolicyd check
03477de 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
JacobBuskirk and others added 26 commits February 22, 2023 14:30
@JacobBuskirk
#174 Correct opensshserver.config CRYPTO_POLICY
6ace2a2 
Signed-off-by: Jacob Buskirk <jbuskirk1995@gmail.com>
@JacobBuskirk
#175
1d30c1f 
Signed-off-by: Jacob Buskirk <jbuskirk1995@gmail.com>
@JacobBuskirk
#176
4ef0261 
Signed-off-by: Jacob Buskirk <jbuskirk1995@gmail.com>
@uk-bolly
Merge pull request #178 from JacobBuskirk/ABRT_Removal
47e7c5c 
Correct abrt* Package Removal
@uk-bolly
Merge pull request #179 from JacobBuskirk/Regex_Fix
220ba42 
Correct opensshserver.config CRYPTO_POLICY
@uk-bolly
Merge pull request #180 from JacobBuskirk/Auditd_Permissions
f81ff80 
Correct Auditd Permissions
@JacobBuskirk
RHEL-08-010690 Prelim remove args
e0c269a 
Signed-off-by: Jacob Buskirk <jbuskirk1995@gmail.com>
@uk-bolly
Merge pull request #181 from JacobBuskirk/Prelim_Fix
dc86c9d 
Fix #176
@uk-bolly
pamd updates and logic improvements
5657371 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Added tags pamd controls
c6beaa3 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated
a13535b 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
inventory now allows correct audit benchamrk to run
e24ac51 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@whitehat237
Adds default variables and task to modify getent user enumeration com…
780bf4d 
…mand when autofs remote home directories are used.

Signed-off-by: whitehat237 <whitehat237@gmail.com>
@whitehat237
Adds default variables and task to modify getent user enumeration com…
9129ca4 
…mand when autofs remote home directories are used.

Signed-off-by: whitehat237 <whitehat237@gmail.com>
@whitehat237
Updates task name per task naming convention standard used
62cac83 
Signed-off-by: whitehat237 <whitehat237@gmail.com>
@uk-bolly
Merge pull request #183 from ansible-lockdown/pamd_updates
292d058 
Pamd updates
@uk-bolly
updated logic and seperated tasks
8828e34 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
added isolated cipher/mac/kex configs
4823364 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated
88e7eaf 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
removed debug
835f53a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
removed test tag
b318c3b 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
removed repeated content
35e7440 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated
8c0f1eb 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Merge pull request #187 from ansible-lockdown/openssh_improvements
7a7fafa 
Openssh improvements
@whitehat237
Updates task name
bb7578c 
Signed-off-by: whitehat237 <whitehat237@gmail.com>
@uk-bolly
Merge pull request #185 from whitehat237/devel
7e6ca37 
Adds default variables and task to modify getent user enumeration com…
georgenalen
georgenalen approved these changes Mar 17, 2023
View reviewed changes
Copy link
Contributor

@georgenalen georgenalen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

@uk-bolly uk-bolly marked this pull request as ready for review March 20, 2023 08:10
@uk-bolly uk-bolly merged commit e8063eb into main Mar 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@georgenalen georgenalen georgenalen approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
4 participants
@uk-bolly @georgenalen @JacobBuskirk @whitehat237