ansible-lockdown/RHEL9-CIS issues and pull requests

#241 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 4 days ago

#240 - Sept 24 updates

Pull Request - State: closed - Opened by uk-bolly 9 days ago

#239 - audit_log_dir not created

Issue - State: open - Opened by gocyclones 9 days ago - 1 comment
Labels: bug

#238 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 11 days ago

#237 - CIS Benchmark version 2.0.0

Issue - State: open - Opened by sltvtr 16 days ago - 1 comment
Labels: question

#236 - Sshd config create

Pull Request - State: closed - Opened by uk-bolly 22 days ago

#235 - rhel9-cis main release v1.0.0

Pull Request - State: closed - Opened by uk-bolly 23 days ago

#234 - Fix link to Changelog.md in README.md

Pull Request - State: closed - Opened by markgoddard about 1 month ago

#233 - added fix for #232 thanks to @Arkhenys

Pull Request - State: closed - Opened by uk-bolly about 1 month ago

#232 - 4.2.1.5: Typo in Rsyslog rule

Issue - State: closed - Opened by Arkhenys about 1 month ago - 1 comment
Labels: bug

#231 - added calls to sshd restart handler to fix #230

Pull Request - State: closed - Opened by numericillustration about 1 month ago - 1 comment

#230 - many 5.2.X sections edit the sshd config file but do not call the restart handler for sshd

Issue - State: closed - Opened by numericillustration about 1 month ago - 1 comment
Labels: bug

#229 - In the latest release and develop branch the final audit output is broken

Issue - State: closed - Opened by ckbaker10 about 2 months ago - 3 comments
Labels: bug

#228 - August issues

Pull Request - State: closed - Opened by uk-bolly about 2 months ago

#227 - Merged Commit broke audit playbook

Issue - State: closed - Opened by ckbaker10 about 2 months ago - 2 comments
Labels: bug

#226 - 4.1.4.3 fails in check mode

Issue - State: closed - Opened by karlg100 about 2 months ago - 3 comments

#225 - 5.5.1 and others breaks authselect

Issue - State: open - Opened by karlg100 about 2 months ago - 1 comment

#224 - pipeline failed when applid TASK 4.1.4.5 | PATCH | Ensure audit configuration files are 640 or more restrictive

Issue - State: closed - Opened by globalpayments-shoebsyed about 2 months ago - 3 comments
Labels: enhancement

#223 - How to avoid handler name clashes across roles in the same play.

Issue - State: open - Opened by NeilDavisNPS 2 months ago - 1 comment
Labels: question

#222 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 2 months ago

#221 - Issue audit updates

Pull Request - State: closed - Opened by uk-bolly 3 months ago - 2 comments

#220 - Update cis_5.1.x.yml

Pull Request - State: closed - Opened by Wykx-Sama 3 months ago - 2 comments

#219 - cis-1.1.1.yml /bin/true -> /bin/false ?

Issue - State: closed - Opened by Wykx-Sama 3 months ago - 2 comments
Labels: question

#218 - 5.1.8 and 5.1.9 permissions error

Issue - State: closed - Opened by Wykx-Sama 3 months ago - 2 comments
Labels: bug

#217 - Search for SUID extends to NFS mount directories

Issue - State: closed - Opened by tedunder237 3 months ago - 1 comment
Labels: bug

#216 - Extra space in regex causes gnome tools to not work

Issue - State: closed - Opened by tedunder237 3 months ago - 2 comments
Labels: bug

#215 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 3 months ago

#214 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 3 months ago

#213 - Update to galaxy meta

Pull Request - State: closed - Opened by uk-bolly 4 months ago

#212 - updated due to galaxy limitation

Pull Request - State: closed - Opened by uk-bolly 4 months ago

#211 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 4 months ago

#210 - Release to main

Pull Request - State: closed - Opened by uk-bolly 4 months ago

#209 - June24 updates

Pull Request - State: closed - Opened by uk-bolly 4 months ago

#208 - 2.4 : socket vs sockets (typo)

Pull Request - State: closed - Opened by svennd 4 months ago

#207 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 5 months ago

#206 - Typo

Pull Request - State: closed - Opened by svennd 5 months ago - 1 comment

#205 - Release to main

Pull Request - State: closed - Opened by uk-bolly 5 months ago

#204 - updated audit binary assert statement

Pull Request - State: closed - Opened by uk-bolly 5 months ago

#203 - updated assert for audit setup

Pull Request - State: closed - Opened by uk-bolly 5 months ago

#202 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 6 months ago

#201 - April_24 updates

Pull Request - State: closed - Opened by uk-bolly 6 months ago

#200 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 6 months ago

#199 - removing the async; the results of init are needed in the subsequent step

Pull Request - State: closed - Opened by mark-tomich 6 months ago - 1 comment

#198 - Aide path to /usr/sbin

Pull Request - State: closed - Opened by brakkio86 6 months ago - 1 comment

#197 - AIDE installation fails because database doesn't (yet) exist

Issue - State: closed - Opened by mark-tomich 6 months ago - 1 comment
Labels: bug

#196 - Duplicate of #190

Pull Request - State: closed - Opened by ipruteanu-sie 6 months ago - 2 comments

#195 - Main

Pull Request - State: closed - Opened by gbspop2 6 months ago - 2 comments

#194 - remove quotes in sudoers file in order to pass openscap security scan

Pull Request - State: closed - Opened by brakkio86 6 months ago - 6 comments

#193 - Accounts password pam pwhistory remember password auth

Pull Request - State: closed - Opened by brakkio86 6 months ago - 1 comment

#192 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 6 months ago

#191 - 5.5.1 through 5.5.4 do not account for authselect

Issue - State: closed - Opened by numericillustration 7 months ago - 1 comment
Labels: bug

#190 - Chage tool related settings: max-days, min-days and warn-age, for get…

Pull Request - State: closed - Opened by ipruteanu-sie 7 months ago - 3 comments

#189 - 5.6.1.{1-3} rules are only partially implemented, the chage options are missing

Issue - State: closed - Opened by ipruteanu-sie 7 months ago
Labels: bug

#188 - Address issues in 4.1.1.2 and 4.1.1.3 including idempotent status

Pull Request - State: closed - Opened by RoboPickle 7 months ago

#187 - Idempotent and other issues in 4.1.1.2 and 4.1.1.3

Issue - State: closed - Opened by RoboPickle 7 months ago
Labels: bug

#186 - March 24 to devel

Pull Request - State: closed - Opened by uk-bolly 7 months ago

#185 - Gpg import for rhel servers

Pull Request - State: closed - Opened by uk-bolly 7 months ago

#184 - Cleaning up references for authconfig in this repo as well, syntax-er…

Pull Request - State: closed - Opened by ipruteanu-sie 7 months ago - 1 comment

#183 - Using in defaults file same var-name as the actual ones which are in …

Pull Request - State: closed - Opened by ipruteanu-sie 7 months ago - 1 comment

#182 - Var name inconsistent between `defaults/main.yml` and actual task usage

Issue - State: closed - Opened by ipruteanu-sie 7 months ago - 1 comment
Labels: bug

#181 - Raw cherry-pick of commits: d53e3ed350114e094322162a7984010214acb7e4 …

Pull Request - State: closed - Opened by ipruteanu-sie 7 months ago - 1 comment

#180 - Small changes, improved consistency

Pull Request - State: closed - Opened by ipruteanu-sie 7 months ago - 3 comments

#179 - Feb24 updates

Pull Request - State: closed - Opened by uk-bolly 7 months ago - 1 comment

#178 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 7 months ago

#177 - Bugfix 5 3 4 against issue #176

Pull Request - State: closed - Opened by RoboPickle 8 months ago - 2 comments

#176 - Using an AD account to connect to host incorrectly fails rule 5.3.4

Issue - State: closed - Opened by RoboPickle 8 months ago
Labels: bug

#175 - fix: idempotency molecule issue fixed for logfiles #173

Pull Request - State: closed - Opened by rjacobs1990 8 months ago - 4 comments

#174 - oscap scan found 2 issues in sshd configuration override files

Pull Request - State: closed - Opened by bbaassssiiee 8 months ago

#173 - 4.2.3 | PATCH | Ensure permissions on all logfiles are configured - Not idempotent with Molecule

Issue - State: closed - Opened by rjacobs1990 8 months ago - 2 comments
Labels: bug

#171 - Rule 5.2.20 expects values different than 0, but previous form of the…

Pull Request - State: closed - Opened by ipruteanu-sie 8 months ago - 2 comments

#170 - CIS FAIL: Wrong value for CountMax

Issue - State: closed - Opened by ipruteanu-sie 8 months ago - 1 comment
Labels: bug

#169 - Update cis_6.1.x.yml

Pull Request - State: closed - Opened by Illibur 8 months ago

#168 - DEPRECATION WARNING is generating when play task `6.1.11 | AUDIT | Ensure no ungrouped files or directories exist`

Issue - State: closed - Opened by Illibur 8 months ago - 1 comment
Labels: enhancement

#167 - [pre-commit.ci] pre-commit autoupdate

Pull Request - State: closed - Opened by pre-commit-ci[bot] 8 months ago

#166 - Siemens/feat/bgrubby usage for params

Pull Request - State: closed - Opened by ipruteanu-sie 8 months ago

#165 - Solving conflicts after previous commit:

Pull Request - State: closed - Opened by ipruteanu-sie 8 months ago - 1 comment

#162 - 5.6.5 rule does not treat the CIS expectation regarding `/etc/pam.d/{system-auth | password-auth}` files

Issue - State: closed - Opened by ipruteanu-sie 8 months ago - 2 comments
Labels: bug

#160 - CIS uses `grubby` for checking rules `4.1.1.2` & `4.1.1.3`, which are thus failing

Issue - State: closed - Opened by ipruteanu-sie 8 months ago
Labels: bug

#158 - Implementation using Red Hat Satellite will never work - AAP may need to use a legacy execution environment.

Issue - State: closed - Opened by sickbock 8 months ago - 3 comments
Labels: bug

#156 - auth-select options variable not used

Pull Request - State: closed - Opened by ipruteanu-sie 8 months ago - 4 comments

#155 - 'authselect' does not use variable which contain many config-options, since for RH9 is not required anymore

Issue - State: closed - Opened by ipruteanu-sie 8 months ago
Labels: bug

#153 - Align RHEL9 hardening to RHEL8 to pass OpenSCAP check

Pull Request - State: closed - Opened by jLemmings 9 months ago - 3 comments

#149 - a pair of tags in 5.6 are mismatching with their task

Issue - State: closed - Opened by numericillustration 9 months ago - 1 comment
Labels: bug

#147 - Improvement(consistency-wise) for variables definition

Issue - State: closed - Opened by ipruteanu-sie 9 months ago - 1 comment
Labels: bug

#146 - role fails when sections 4.1.4.5, 4.1.4.6 and 4.1.4.7 are set to false on the defaults main file

Issue - State: closed - Opened by sgomez86 10 months ago - 2 comments
Labels: bug