Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cis 2.0.1 release #91

Merged
merged 124 commits into from Sep 13, 2023
Merged

Cis 2.0.1 release #91

merged 124 commits into from Sep 13, 2023

Conversation

uk-bolly
Copy link
Member

@uk-bolly uk-bolly commented Sep 11, 2023 •
edited

Overall Review of Changes:

  • v2.0.1 - refer to change history from official CIS pdf.
    • ReWrite of many rules
    • Ordering and numbering of rules
    • many title updates
  • timesync options increased
    • default systemd-timesyncd
    • chrony options updated
  • idempotency improvements
  • new discoveries
    • interactive users
    • uid min value
    • is_container discovery and default var
  • pre-commit added to setup
  • README new layout

thanks to dderemiah for work testing this and feeding back

  • Added test for rule 4.3.4 check user is using sudo has password set before NOPASSWD removed from sudoers

Issue Fixes:

Enhancements:
See list

How has this been tested?:
Manually

@uk-bolly
1.1.1.7 now level2
01e70f8 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.2.x controls updated
0072409 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated ansible version
3a33af2 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
renamed file
6328a0f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.3.x updated
64e558f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.4.x updated
86b596e 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.5.x updated
41b5ddd 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.6.x updated
b7d1495 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.7.x updated
2427936 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.8.x updated
6ccdd65 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.2.x updated
b12b09e 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.3.x updated
2de8517 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.4.x updated
dab5c04 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.5.x updated
032345f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.6.x updated
c5e377b 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.7 updated
ed0cb4a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.8.x updated
e04f157 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.9 removed
fbdfa71 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
2.1.x updated
368ba9f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
2.2.x updated
a4df444 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
2.3.x and 2.4 updates
9c12095 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
3.1.x updated
6a4a482 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
3.4.x updated
2818b1d 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
4.1.x and 4.2.x updated
ec8afec 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
4.3.x updated
6772c87 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
4.4.x updated
c67bed4 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
fix typos
e97de44 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
4.5.x updated
1b7a05c 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
section 4 update
e63c12c 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
5.1.1.x updated
4732e9a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
add min_uid var
734002a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
lint updates
c03dacb 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
syslog service var added
928bcbe 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
ufw default firewall
5902dea 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
fixed loop
b87ca2e 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
fixed control 3.4.1.7
792478a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Add sudo user password check
7ef3f26 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Merge branch 'devel' into cis_2.0.1
90b80d7
@uk-bolly
updated handler naming
71b2757 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
4.1.8 group updated
3463ae0 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
update handler & blacklist added
b7581cd 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
blacklist added
a2b7b00 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
added pre-commit setup
f046ed0 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
added pre-commit
0d9ee73 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated
b198a6b 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated secrets
3580160 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated passwd_hash_algo line
06e3cc9 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
aligned var naming
d22a744 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Copy link
Member Author

note
action completed before workflow and premcommit update
https://github.com/ansible-lockdown/UBUNTU20-CIS/actions/runs/6145273872/job/16672325479?pr=91

@uk-bolly
Added precommit
492a486 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated .github content workflow
20ed92b 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated secrets scan
ccba850 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
yamllint updates
11db92a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
workflow updates
f0f3a28 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated truth value
be4da56 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated commits
f0e2e67 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
MrSteve81
MrSteve81 approved these changes Sep 13, 2023
View reviewed changes
Copy link
Contributor

@MrSteve81 MrSteve81 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@uk-bolly uk-bolly merged commit 17c7401 into devel Sep 13, 2023
2 of 3 checks passed
@uk-bolly uk-bolly deleted the cis_2.0.1 branch September 19, 2023 11:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@MrSteve81 MrSteve81 MrSteve81 approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@uk-bolly @MrSteve81