Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

devel -> main cis 2.0.1 #97

Merged
merged 148 commits into from Sep 25, 2023
Merged

devel -> main cis 2.0.1 #97

merged 148 commits into from Sep 25, 2023

Conversation

uk-bolly
Copy link
Member

Overall Review of Changes:

V2.0 based upon CIS 2.0.1

  • v2.0.1 - refer to change history from official CIS pdf.

    • ReWrite of many rules
    • Ordering and numbering of rules
    • many title updates

  • timesync options increased

    • default systemd-timesyncd
    • chrony options updated

  • idempotency improvements

  • new discoveries

    • interactive users
    • uid min value
    • is_container discovery and default var

  • pre-commit added to setup

  • README new layout

  • lint updates

  • Added test for rule 4.3.4 check user is using sudo has password set before NOPASSWD removed from sudoers

How has this been tested?:
Manually and pipeline

@uk-bolly
1.1.1.7 now level2
01e70f8 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.2.x controls updated
0072409 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated ansible version
3a33af2 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
renamed file
6328a0f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.3.x updated
64e558f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.4.x updated
86b596e 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.5.x updated
41b5ddd 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.6.x updated
b7d1495 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.7.x updated
2427936 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.1.8.x updated
6ccdd65 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.2.x updated
b12b09e 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.3.x updated
2de8517 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.4.x updated
dab5c04 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.5.x updated
032345f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.6.x updated
c5e377b 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.7 updated
ed0cb4a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.8.x updated
e04f157 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
1.9 removed
fbdfa71 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
2.1.x updated
368ba9f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
2.2.x updated
a4df444 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
2.3.x and 2.4 updates
9c12095 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
3.1.x updated
6a4a482 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
3.4.x updated
2818b1d 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
4.1.x and 4.2.x updated
ec8afec 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
4.3.x updated
6772c87 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
4.4.x updated
c67bed4 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
fix typos
e97de44 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
4.5.x updated
1b7a05c 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
section 4 update
e63c12c 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
5.1.1.x updated
4732e9a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
uk-bolly and others added 17 commits September 13, 2023 13:43
@uk-bolly
updated truth value
be4da56 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated commits
f0e2e67 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Merge pull request #91 from ansible-lockdown/cis_2.0.1
17c7401 
Cis 2.0.1 release
@uk-bolly
updated discord link
d2e4b58 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Merge pull request #92 from ansible-lockdown/discord_link
47fc6e8 
updated discord link
@uk-bolly
added to create when configured logfile does not exist
dd7eb09 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated
c8f5ebf 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
lint updates
073df00 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
audited
a9f7ef4 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated baselines
82ba1c3 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated secrets
03d1b7b 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Merge pull request #94 from ansible-lockdown/issue_#90
e68ea6c 
added to create when configured logfile does not exist
@uk-bolly
Merge pull request #95 from ansible-lockdown/issue_#90
7321713 
Issue #90
@uk-bolly
updated badges
9370aee 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Merge pull request #96 from ansible-lockdown/badges
d57debb 
updated badges
@dderemiah
Fixes remount /tmp typo
c48b7c9 
Signed-off-by: Dan D <daniel.deremiah@windriver.com>
@uk-bolly
Merge pull request #93 from dderemiah/typo_fix
32cbc8f 
Fixes remount /tmp typo
@uk-bolly
Copy link
Member Author

Note that workflow will fail as file no longer exist for the legacy setup

uk-bolly and others added 9 commits September 21, 2023 17:46
@uk-bolly
updated for grub password settings
8223dc8 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated
c9881b9 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated
d236a18 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated template for bootloader hash
7b9281e 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@MrSteve81
Merge pull request #98 from ansible-lockdown/grub_passwd
a1c073c 
Grub passwd update
@uk-bolly
typo fix
a652e11 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated goss link
ebafd8d 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
added attributes file
5afca4c 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Merge pull request #99 from ansible-lockdown/readme
9b87264 
readme update and gitattributes
MrSteve81
MrSteve81 approved these changes Sep 25, 2023
View reviewed changes
Copy link
Contributor

@MrSteve81 MrSteve81 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@uk-bolly uk-bolly merged commit e68a6f4 into main Sep 25, 2023
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@MrSteve81 MrSteve81 MrSteve81 approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@uk-bolly @MrSteve81 @dderemiah