Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

Owner: Olaf Heimburger

Version: 250722 (cis_report.py version 3.0.1) for CIS OCI Foundation Benchmark 3.0.0
Version: 251104 (cis_report.py version 3.1.0) for CIS OCI Foundation Benchmark 3.0.0

# Introduction
![Flyer](./files/resources/OCI_Security_Health_Check_Standard.png)
Expand Down Expand Up @@ -57,22 +57,22 @@ See the *OCI Security Health Check - Standard Edition* in action and watch the [

Before running the *OCI Security Health Check - Standard Edition* you should download and verify it.

- Download the latest distribution [oci-security-health-check-standard-250722.zip](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-250722.zip).
- Download the latest distribution [oci-security-health-check-standard-251104.zip](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-251104.zip).
- Download the respective checksum file:
- [oci-security-health-check-standard-250722.sha512](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-250722.sha512).
- [oci-security-health-check-standard-250722.sha512256](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-250722.sha512256).
- [oci-security-health-check-standard-251104.sha512](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-251104.sha512).
- [oci-security-health-check-standard-251104.sha512256](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-251104.sha512256).
- Verify the integrity of the distribution. Both files must be in the same directory (for example, in your downloads directory).

On MacOS:
```
cd <your_downloads_directory>
shasum -a 512256 -c oci-security-health-check-standard-250722.sha512256
shasum -a 512256 -c oci-security-health-check-standard-251104.sha512256
```

On Linux (including Cloud Shell):
```
cd <your_downloads_directory>
sha512sum -c oci-security-health-check-standard-250722.sha512
sha512sum -c oci-security-health-check-standard-251104.sha512
```

**Reject the downloaded file if the check fails!**
Expand All @@ -85,10 +85,10 @@ In OCI Cloud Shell you can do a short cut without downloading the files mentione
2. Open Cloud Shell
3. Run these commands in your Cloud Shell:
```
wget -q https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-250722.zip
wget -q https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-250722.sha512
sha512sum -c oci-security-health-check-standard-250722.sha512
unzip -q oci-security-health-check-standard-250722.zip
wget -q https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-251104.zip
wget -q https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-251104.sha512
sha512sum -c oci-security-health-check-standard-251104.sha512
unzip -q oci-security-health-check-standard-251104.zip
```

## Prepare the OCI Tenancy
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

Owner: Olaf Heimburger

Version: 250722 (cis_report.py version 3.0.1) for CIS OCI Foundation Benchmark 3.0.0
Version: 251104 (cis_report.py version 3.1.0) for CIS OCI Foundation Benchmark 3.0.0

## When to use this asset?

Expand Down Expand Up @@ -47,22 +47,22 @@ Tested on **OCI Cloud Shell** with **Public network**, **Oracle Linux**, **MacOS

Before running the *OCI Security Health Check - Standard Edition* you should download and verify it.

- Download the latest distribution [oci-security-health-check-standard-250722.zip](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-250722.zip).
- Download the latest distribution [oci-security-health-check-standard-251104.zip](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-251104.zip).
- Download the respective checksum file:
- [oci-security-health-check-standard-250722.sha512](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-250722.sha512).
- [oci-security-health-check-standard-250722.sha512256](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-250722.sha512256).
- [oci-security-health-check-standard-251104.sha512](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-251104.sha512).
- [oci-security-health-check-standard-251104.sha512256](https://github.com/oracle-devrel/technology-engineering/raw/main/security/security-design/shared-assets/oci-security-health-check-standard/files/resources/oci-security-health-check-standard-251104.sha512256).
- Verify the integrity of the distribution. Both files must be in the same directory (for example, in your downloads directory).

On MacOS:
```
cd <your_downloads_directory>
shasum -a 512256 -c oci-security-health-check-standard-250722.sha512256
shasum -a 512256 -c oci-security-health-check-standard-251104.sha512256
```

On Linux (including Cloud Shell):
```
cd <your_downloads_directory>
sha512sum -c oci-security-health-check-standard-250722.sha512
sha512sum -c oci-security-health-check-standard-251104.sha512
```

**Reject the downloaded file when the check fails!**
Expand Down Expand Up @@ -225,7 +225,7 @@ allow group 'Default'/'grp-auditors' to inspect vcns in compartment <compartment
- Upload the distribution file.
- Extract it
```
unzip -q oci-security-health-check-standard-250722.zip
unzip -q oci-security-health-check-standard-251104.zip
```

#### Run the script
Expand Down Expand Up @@ -302,11 +302,11 @@ allow group 'Default'/'grp-auditors' to inspect vcns in compartment <compartment
Follow the instructions to select /usr/bin/python3.9
- Log out

- From your desktop, upload the `oci-security-health-check-standard-250722.zip` file to the Compute VM using any SFTP client.
- From your desktop, upload the `oci-security-health-check-standard-251104.zip` file to the Compute VM using any SFTP client.
- Log into the Compute VM
- Extract the distribution
```
unzip -q oci-security-health-check-standard-250722.zip
unzip -q oci-security-health-check-standard-251104.zip
```
- Change directory into `oci-security-health-check-standard`:
```
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
OCI Security Health Check - Standard Edition
============================================
Owner: Olaf Heimburger
Version: 250722 (cis_report.py version 3.0.1) for CIS OCI Foundation Benchmark 3.0.0
Version: 251104 (cis_report.py version 3.1.0) for CIS OCI Foundation Benchmark 3.0.0

When to use this asset?

Expand Down Expand Up @@ -130,7 +130,7 @@ Usage
- From the menu select the Cloud Shell item.
- When running it the first time:
- Upload the provided ZIP file.
- Extract it with unzip -q oci-security-health-check-standard-250722.zip
- Extract it with unzip -q oci-security-health-check-standard-251104.zip
- Change directory into oci-security-health-check-standard
$ cd oci-security-health-check-standard
$ screen
Expand Down Expand Up @@ -190,11 +190,11 @@ Usage
- Log out

- From your desktop, upload the
"oci-security-health-check-standard-250722.zip" file to the Compute VM
"oci-security-health-check-standard-251104.zip" file to the Compute VM
using any SFTP client.
- Log into the Compute VM
- Extract the distribution
unzip -q oci-security-health-check-standard-250722.zip
unzip -q oci-security-health-check-standard-251104.zip

- Change directory into "oci-security-health-check-standard":
cd oci-security-health-check-standard
Expand Down
Loading