Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When enabling ufw some sysctl settings get overridden causing CIS failures #28

Closed
jrbeilke opened this issue Apr 9, 2021 · 0 comments · Fixed by #34
Closed

When enabling ufw some sysctl settings get overridden causing CIS failures #28

jrbeilke opened this issue Apr 9, 2021 · 0 comments · Fixed by #34

Comments

@jrbeilke
Copy link

jrbeilke commented Apr 9, 2021

When ufw is enabled it includes its own sysctl settings which override some of the settings needed for the CIS benchmark ie.

  • log_martians for SCORED | 3.2.4 | PATCH | Ensure suspicious packets are logged

https://serverfault.com/questions/745995/enabling-ufw-disables-some-of-the-settings-in-sysctl-conf

If ufw is enabled then it seems the Ansible role will need to also update any relevant sysctl settings in /etc/ufw/sysctl.conf

georgenalen added a commit that referenced this issue Apr 14, 2021
Signed-off-by: George Nalen <georgen@mindpointgroup.com>
georgenalen added a commit that referenced this issue Apr 14, 2021
fix for issue #28
Signed-off-by: George Nalen <georgen@mindpointgroup.com>
@georgenalen georgenalen linked a pull request Apr 14, 2021 that will close this issue
uk-bolly pushed a commit that referenced this issue Sep 20, 2023
Signed-off-by: George Nalen <georgen@mindpointgroup.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants