ansible-lockdown/RHEL6-STIG issues and pull requests

#100 - Fixing V-38447 and V-38453 AUDIT tasks

Pull Request - State: closed - Opened by jcrisologo almost 8 years ago

#99 - Misc features and enhancement

Pull Request - State: closed - Opened by samdoran almost 8 years ago

#98 - Bootloader Password

Issue - State: closed - Opened by mclarke19 about 8 years ago - 1 comment

#97 - Ansible `stdout_lines` bug when used with the file module

Issue - State: closed - Opened by mliudev over 8 years ago - 5 comments

#96 - Installing the devel branch from galaxy fails.

Issue - State: closed - Opened by mliudev over 8 years ago - 4 comments

#95 - Bugfixes and addition after OSCAP run

Pull Request - State: closed - Opened by bbaassssiiee over 8 years ago - 4 comments

#94 - Add graceful error handling for firewall tasks

Issue - State: closed - Opened by matts-mpg over 8 years ago - 6 comments

#93 - Updates to cat3. Role should now be rev 11 compliant

Pull Request - State: closed - Opened by juliedavila over 8 years ago

#92 - Several fixes

Pull Request - State: closed - Opened by samdoran over 8 years ago
Labels: CAT I, CAT II, CAT III

#91 - Update to cat2 and prelim

Pull Request - State: closed - Opened by juliedavila over 8 years ago
Labels: CAT II

#90 - Cat2 updated

Pull Request - State: closed - Opened by juliedavila over 8 years ago - 1 comment
Labels: CAT II

#89 - fixes for V-57569

Pull Request - State: closed - Opened by clasohm over 8 years ago - 2 comments
Labels: Needs Contributor Revision

#88 - add V-51875

Pull Request - State: closed - Opened by clasohm over 8 years ago

#87 - Correct version check conditional

Pull Request - State: closed - Opened by samdoran over 8 years ago - 1 comment

#86 - add V-38608, V-38610, V-38616

Pull Request - State: closed - Opened by clasohm over 8 years ago - 2 comments
Labels: CAT III, Needs Contributor Revision, P2

#85 - add V-38635

Pull Request - State: closed - Opened by clasohm over 8 years ago
Labels: CAT III

#84 - add V-38540

Pull Request - State: closed - Opened by clasohm over 8 years ago
Labels: CAT III

#83 - add V-38445

Pull Request - State: closed - Opened by clasohm over 8 years ago - 4 comments
Labels: CAT II, Needs Contributor Revision, P2

#82 - add V-38567

Pull Request - State: closed - Opened by clasohm over 8 years ago - 2 comments
Labels: CAT III, Needs Contributor Revision, P2

#81 - add V-57569

Pull Request - State: closed - Opened by clasohm over 8 years ago - 1 comment
Labels: CAT II, Needs Contributor Revision, P2

#80 - add V-38656

Pull Request - State: closed - Opened by clasohm over 8 years ago

#79 - add V-51875

Pull Request - State: closed - Opened by clasohm over 8 years ago - 2 comments
Labels: CAT II, Needs Contributor Revision, P2

#78 - fix V-38453

Pull Request - State: closed - Opened by clasohm over 8 years ago

#77 - fix /var/log/boot.log for V-38623

Pull Request - State: closed - Opened by clasohm over 8 years ago - 1 comment
Labels: CAT II, Needs Contributor Revision, P1

#76 - add V-38543 to V-38565

Pull Request - State: closed - Opened by clasohm over 8 years ago

#75 - lowercase audit options for oscap compliance

Pull Request - State: closed - Opened by clasohm over 8 years ago

#74 - add V-54381

Pull Request - State: closed - Opened by clasohm over 8 years ago

#73 - fix V-38676 to comply with oscap scan

Pull Request - State: closed - Opened by clasohm over 8 years ago

#72 - add task for V-38566

Pull Request - State: closed - Opened by clasohm over 8 years ago

#71 - add task for V-38530

Pull Request - State: closed - Opened by clasohm over 8 years ago

#70 - add tasks for V-38531, V-38534, V-38536, V-38538

Pull Request - State: closed - Opened by clasohm over 8 years ago

#69 - add tasks for V-38522 and V-38527

Pull Request - State: closed - Opened by clasohm over 8 years ago

#68 - fix before_line replace logic

Pull Request - State: closed - Opened by clasohm over 8 years ago

#67 - fix before_line replace logic

Pull Request - State: closed - Opened by clasohm over 8 years ago - 1 comment

#66 - Updates to sysctl errors and checking for ansible version

Pull Request - State: closed - Opened by juliedavila over 8 years ago

#65 - BUGFIX: sysctl unknown keys

Pull Request - State: closed - Opened by juliedavila over 8 years ago
Labels: bug, CAT II

#64 - Fixing wrong tag

Pull Request - State: closed - Opened by jtyr over 8 years ago - 1 comment

#63 - Bugfix for pam module

Pull Request - State: closed - Opened by juliedavila over 8 years ago - 3 comments
Labels: bug, CAT II, CAT III, P1

#62 - Conditional execution managed by variables

Issue - State: open - Opened by jtyr over 8 years ago - 4 comments

#61 - Tag prefix

Issue - State: open - Opened by jtyr over 8 years ago - 2 comments

#60 - pam.py leaves 6 trailing spaces in system-auth and password-auth

Issue - State: closed - Opened by bbaassssiiee over 8 years ago - 6 comments
Labels: bug, P1, Proposed Fix in P/R Queue

#59 - sshd_config seems to be mangled

Issue - State: closed - Opened by bbaassssiiee over 8 years ago - 12 comments

#58 - V-38580 AUDIT rule causes fatal error

Issue - State: closed - Opened by bbaassssiiee over 8 years ago - 6 comments

#57 - Refactor CAT II Tasks

Pull Request - State: closed - Opened by samdoran over 8 years ago - 3 comments

#56 - REGRESSION: The ypbind service must not be running

Issue - State: closed - Opened by bbaassssiiee over 8 years ago - 4 comments

#55 - error: "net.ipv6.conf.default.accept_redirects" is an unknown key

Issue - State: closed - Opened by bbaassssiiee over 8 years ago - 9 comments

#54 - fix for #53

Pull Request - State: closed - Opened by bbaassssiiee over 8 years ago

#53 - V-38501AUDIT Fatal due to missing ignore_errors: (2x)

Issue - State: closed - Opened by bbaassssiiee over 8 years ago

#52 - WIP: Refactor CAT II Tasks

Pull Request - State: closed - Opened by samdoran over 8 years ago

#51 - deprecation warning: bare variables

Pull Request - State: closed - Opened by bbaassssiiee over 8 years ago - 1 comment
Labels: Needs Contributor Revision, P4

#50 - Undefined error in deprecation warning

Issue - State: closed - Opened by bbaassssiiee over 8 years ago - 1 comment

#49 - Fix invalid indention

Pull Request - State: closed - Opened by nydr almost 9 years ago

#48 - Role needs to be updated to Revision 15

Issue - State: closed - Opened by shepdelacreme almost 9 years ago - 2 comments
Labels: P1

#47 - SAVE_POINT: update cat2, added a new module in order to automate grub…

Pull Request - State: closed - Opened by juliedavila almost 9 years ago
Labels: CAT II, P1

#46 - SAVE_POINT: Updated cat2 and patched some bugs with the pam module

Pull Request - State: closed - Opened by juliedavila about 9 years ago

#45 - SAVE_POINT: Uploaded PAM module

Pull Request - State: closed - Opened by juliedavila about 9 years ago
Labels: CAT II, Feature Request, P1

#44 - Remove rhel6stig_* prefix from all variables

Issue - State: closed - Opened by shepdelacreme about 9 years ago - 7 comments
Labels: Feature Request, P4

#43 - Save point for Refactor of Cat2

Pull Request - State: closed - Opened by juliedavila about 9 years ago - 1 comment
Labels: CAT II, Needs Security Revision, Needs Syntactical Revision, P2

#42 - Refactor cat1.yml

Pull Request - State: closed - Opened by samdoran about 9 years ago - 2 comments

#41 - SAVE_POINT: cat3 refactor phase 2

Pull Request - State: closed - Opened by shepdelacreme about 9 years ago
Labels: CAT III, Needs Contributor Revision, Needs Syntactical Revision

#40 - V-38546 - Disabling IPv6 incompatible with bonded interfaces

Issue - State: closed - Opened by jcrisologo about 9 years ago - 4 comments
Labels: bug, CAT II, P2

#39 - Ensure postfix is installed prior to removing sendmail

Pull Request - State: closed - Opened by samdoran about 9 years ago - 2 comments
Labels: CAT II, Needs Syntactical Revision, P2

#38 - SAVE_POINT: cat3 refactor

Pull Request - State: closed - Opened by shepdelacreme about 9 years ago - 2 comments
Labels: CAT III

#37 - Revert "SAVE_POINT: Continued refactor for cat2.yml"

Pull Request - State: closed - Opened by shepdelacreme about 9 years ago

#36 - SAVE_POINT: Continued refactor for cat2.yml

Pull Request - State: closed - Opened by juliedavila about 9 years ago - 1 comment
Labels: CAT II

#35 - Initial Refactor Effort for CAT 1 and Non automated benchmarks

Pull Request - State: closed - Opened by juliedavila about 9 years ago - 3 comments
Labels: CAT I, CAT II, Needs Security Revision, P2

#34 - This is a fix for release 8 of the STIG, and adds performance boost to auditd

Pull Request - State: closed - Opened by bbaassssiiee about 9 years ago - 8 comments
Labels: P1

#33 - Fix for #30 (pam issues) and a fix for audit log performance.

Pull Request - State: closed - Opened by bbaassssiiee about 9 years ago - 2 comments
Labels: Needs Security Revision, P1

#32 - Add CentOS to test pipeline

Issue - State: closed - Opened by juliedavila about 9 years ago - 2 comments
Labels: P4

#31 - CI Testing Process Should Include checks for any missing rules

Issue - State: closed - Opened by juliedavila about 9 years ago - 1 comment
Labels: P2

#30 - Role needs to be updated to Revision 8

Issue - State: closed - Opened by juliedavila about 9 years ago - 3 comments
Labels: P1

#29 - Tasks need to be refactored into YAML literal

Issue - State: closed - Opened by juliedavila about 9 years ago - 15 comments
Labels: P3

#28 - Tasks that combine the remediation of multiple rules should be refactored

Issue - State: closed - Opened by juliedavila about 9 years ago - 4 comments
Labels: CAT I, CAT II, CAT III, Needs Syntactical Revision, P1

#27 - V-38671 Remove sendmail package will also remove cronie from CentOS 6 distros.

Issue - State: closed - Opened by mliudev about 9 years ago - 5 comments
Labels: bug, CAT II, P2

#26 - V-38604 ypbind service in cat2.yml not properly written, breaks in ansible v2

Issue - State: closed - Opened by juliedavila over 9 years ago - 1 comment
Labels: CAT II, Needs Syntactical Revision, P2

#25 - Non-system users are locked out from V-38496 finding

Issue - State: closed - Opened by codexchee over 9 years ago

#24 - Non-system accounts lock out bug and closing 1 cat 3 finding

Pull Request - State: closed - Opened by codexchee over 9 years ago

#23 - cat2.yml actions using gconftool only when: rhel6stig_xwindows_required

Issue - State: closed - Opened by bbaassssiiee over 9 years ago - 1 comment
Labels: CAT II, Feature Request, Needs Security Revision, P1

#22 - Installing NTP and 3x Cat 3 findings

Pull Request - State: closed - Opened by codexchee over 9 years ago - 1 comment

#21 - Adding NTP install for minimal install to pass cat2 run and fixing typo

Pull Request - State: closed - Opened by codexchee over 9 years ago

#20 - the backup file for ifcfg-eth0 contains "dhcp" and that lets the benc…

Pull Request - State: closed - Opened by bbaassssiiee over 9 years ago - 1 comment

#19 - Last fix.

Pull Request - State: closed - Opened by bbaassssiiee over 9 years ago - 1 comment

#18 - STIGMA Benchmark score: -H 100 -M 95 -L 92

Pull Request - State: closed - Opened by bbaassssiiee over 9 years ago
Labels: CAT I, CAT II, CAT III, Needs Security Revision, P1

#17 - STIGMA run reports cat2 error after applying the role.

Issue - State: closed - Opened by bbaassssiiee over 9 years ago - 1 comment
Labels: CAT II, P2

#16 - Fixes and improvements to get 100% in cat1 and 95% in cat2

Pull Request - State: closed - Opened by bbaassssiiee over 9 years ago - 3 comments

#15 - nullok should not be present in /etc/pam.d/system-auth and /etc/pam.d/pa...

Pull Request - State: closed - Opened by bbaassssiiee over 9 years ago - 1 comment

#14 - Separate check and correction action

Issue - State: closed - Opened by jtyr over 9 years ago - 9 comments
Labels: Feature Request, P2

#13 - STIGMA run reports cat1 error after applying the role.

Issue - State: closed - Opened by bbaassssiiee over 9 years ago - 1 comment
Labels: CAT I, P1

#12 - added check for samba

Pull Request - State: closed - Opened by juliedavila over 9 years ago
Labels: CAT III, Needs Security Revision, P2

#11 - fix for issue 7, tested`

Pull Request - State: closed - Opened by juliedavila over 9 years ago

#10 - Revert "Merge pull request #8 from defionscode/Issue7_fix"

Pull Request - State: closed - Opened by juliedavila over 9 years ago

#9 - add check for rhnsd, fixes issue 6

Pull Request - State: closed - Opened by juliedavila over 9 years ago - 1 comment
Labels: CAT III, Needs Security Revision, P1

#8 - Password locking changed_status fix

Pull Request - State: closed - Opened by juliedavila over 9 years ago
Labels: CAT II, Needs Security Revision, P2

#7 - password locking of system accounts not idempotent

Issue - State: closed - Opened by bbaassssiiee over 9 years ago - 8 comments
Labels: CAT II, P2

#6 - verify presence of rhnsd service before chkconfig & service stop

Issue - State: closed - Opened by bbaassssiiee over 9 years ago - 1 comment
Labels: bug, CAT III

#5 - file handling of /etc/pam.d/password-auth not idempotent

Issue - State: closed - Opened by bbaassssiiee over 9 years ago - 1 comment

#4 - file handling of /etc/pam.d/system-auth not idempotent

Issue - State: closed - Opened by bbaassssiiee over 9 years ago - 1 comment
Labels: bug, CAT II, P1

#3 - fixing idempotency for sshd_config file, no change when no changes, no d...

Pull Request - State: closed - Opened by bbaassssiiee over 9 years ago - 1 comment
Labels: CAT III, Needs Security Revision, P1

#2 - presence of smbclient is not checked before V-38656 check

Issue - State: closed - Opened by bbaassssiiee over 9 years ago - 4 comments
Labels: bug, CAT III, P1, Proposed Fix in P/R Queue

#1 - failed to download the file.

Issue - State: closed - Opened by bbaassssiiee over 9 years ago - 5 comments

GitHub / ansible-lockdown/RHEL6-STIG issues and pull requests