ovh/debian-cis issues and pull requests

#243 - build(deps): bump luizm/action-sh-checker from 0.8.0 to 0.9.0

Pull Request - State: open - Opened by dependabot[bot] 12 days ago - 8 comments
Labels: dependencies

#242 - Auto Installer

Pull Request - State: open - Opened by SleepTheGod 21 days ago - 1 comment

#241 - Disable all file systems not actively used

Issue - State: open - Opened by wilsonmar about 2 months ago

#240 - Possible to use for Proxmox-Hosts?

Issue - State: open - Opened by JSuenram 5 months ago - 4 comments

#239 - 5.4.5_default_timeout.sh missing HARDENING_LEVEL

Issue - State: open - Opened by CookieCr2nk 6 months ago

#238 - build(deps): bump dev-drprasad/delete-tag-and-release from 1.0.1 to 1.1

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 8 comments
Labels: dependencies

#237 - fix: invalid behavior on sid/alternative in 5.3.4/99.5.4.5.1

Pull Request - State: closed - Opened by sinrazon 7 months ago - 2 comments

#236 - fix: catch cidr network in ssh keys

Pull Request - State: closed - Opened by Isma399 7 months ago

#235 - What CIS Benchmark is used exactly ? What do I implement ?

Issue - State: closed - Opened by ManuGithubSteam 7 months ago - 1 comment

#234 - build(deps): bump metcalfc/changelog-generator from 4.2.0 to 4.3.1

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 16 comments
Labels: dependencies

#233 - Ignoring path requires 3 different variables

Issue - State: open - Opened by sblaisot 8 months ago - 1 comment
Labels: enhancement

#232 - fix: allow set-hardening-level option usage

Pull Request - State: closed - Opened by ThibaultDewailly 8 months ago - 13 comments

#231 - How to use debian-cis? [explained for non expert Linux admins]

Issue - State: closed - Opened by bluepuma77 8 months ago - 5 comments

#230 - hardening.sh --set-hardening-level does not work

Issue - State: closed - Opened by highwayfixerman 8 months ago - 1 comment
Labels: bug

#229 - build(deps): bump metcalfc/changelog-generator from 4.2.0 to 4.3.0

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 9 comments
Labels: dependencies

#228 - allow multiple users in 5.2.18

Pull Request - State: closed - Opened by lgaida 9 months ago

#227 - [5.2.18] Script breaks due to space separation in ALLOWED_USERS

Issue - State: closed - Opened by lgaida 9 months ago

#226 - Syslog-ng fixes and enhancements

Pull Request - State: closed - Opened by ThibaultDewailly 9 months ago

#225 - fix: Allow --only option to be called multiple times

Pull Request - State: closed - Opened by ThibaultDewailly 9 months ago

#224 - Use multiple scripts with only option

Issue - State: closed - Opened by foolished129 9 months ago - 1 comment

#223 - fix: update Readme to clarify project usage

Pull Request - State: closed - Opened by ThibaultDewailly 9 months ago

#222 - fix: typo in README. Update example of --audit usage

Pull Request - State: closed - Opened by ThibaultDewailly 9 months ago

#221 - Allow multiple exception users to be defined for 99.5.2.4_ssh_keys_from

Pull Request - State: closed - Opened by lgaida 9 months ago - 2 comments
Labels: enhancement

#220 - Fix Quickstart, missing character

Issue - State: closed - Opened by bluepuma77 10 months ago - 1 comment

#219 - Update README.md to Represent Actual Hardening Abilities

Issue - State: closed - Opened by jessejcollins 10 months ago - 1 comment

#218 - Seeking approval for relicensing of software

Issue - State: closed - Opened by JeremiahSecrist 10 months ago - 1 comment

#217 - can follow the guide, can't read etc/default/cis-hardening: No such file or directory

Issue - State: closed - Opened by Ondjultomte 10 months ago - 1 comment

#216 - Adapt all scripts to yescrypt

Pull Request - State: closed - Opened by speed47 10 months ago - 1 comment

#215 - fix: clean obsolete check 99.5.4.5.1, now handled by 5.3.4

Pull Request - State: closed - Opened by ThibaultDewailly 11 months ago

#214 - build(deps): bump metcalfc/changelog-generator from 4.1.0 to 4.2.0

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago
Labels: dependencies

#213 - enh: remove ssh system sandbox check

Pull Request - State: closed - Opened by ThibaultDewailly 11 months ago

#212 - Deprecated check 99.5.2.8_ssh_sys_sandbox

Issue - State: closed - Opened by agrimal 11 months ago - 1 comment
Labels: enhancement

#211 - Unable to deploy this script on Ubuntu 22.o LTS

Issue - State: closed - Opened by Vincentssssssss 11 months ago - 5 comments
Labels: question

#210 - build(deps): bump luizm/action-sh-checker from 0.7.0 to 0.8.0

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago
Labels: dependencies

#209 - Password hashes in /etc/shadow not SHA512

Issue - State: closed - Opened by ITNerdbox 12 months ago - 1 comment
Labels: enhancement

#208 - fix: root_dir is still /opt/cis-hardenign for the moment

Pull Request - State: closed - Opened by ThibaultDewailly 12 months ago - 1 comment

#207 - fix: debian12 functional test pass is now mandatory

Pull Request - State: closed - Opened by ThibaultDewailly almost 1 year ago

#206 - feat: Officialize Debian 12 support

Pull Request - State: closed - Opened by ThibaultDewailly almost 1 year ago

#205 - Update the documentation and add a debian/changelog entry

Pull Request - State: closed - Opened by P-EB about 1 year ago - 2 comments

#204 - Replace CIS_ROOT_DIR by a more flexible system

Pull Request - State: closed - Opened by P-EB about 1 year ago - 7 comments

#203 - feat: add nftables to firewall software allow list

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago - 1 comment

#202 - build(deps): bump actions/checkout from 3 to 4

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#201 - CIS Benchmark numbering doesn't match CIS official docs

Issue - State: closed - Opened by moshe about 1 year ago - 1 comment

#200 - Is this script compatible with Debian 12 ?

Issue - State: closed - Opened by AkechiShiro about 1 year ago - 2 comments

#199 - fix: correct debian version check on 5.2.15 configuration generation

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago

#198 - fix: chore debian manual update

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago

#197 - fix: chore, debug logs print correctly now

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago

#196 - 5.2.15 script not looking for match defined in the CIS_Debian_Linux_10_Benchmark_v1.0.0.pdf

Issue - State: closed - Opened by LoupaLoupa about 1 year ago - 3 comments

#195 - Debain 11 Crashed when enable selinux enforcing mode

Issue - State: open - Opened by Malikjawad05 about 1 year ago - 1 comment
Labels: question

#194 - Add bind mount support

Pull Request - State: closed - Opened by SteamedFish about 1 year ago - 1 comment

#193 - Update warn messages on 2.2.15_mta_localhost.sh

Pull Request - State: closed - Opened by JugeHuge about 1 year ago

#192 - ntp service is checked even chrony is installed and configured

Issue - State: closed - Opened by JugeHuge about 1 year ago - 7 comments
Labels: enhancement, question

#191 - nftables is not checked.

Issue - State: closed - Opened by JugeHuge about 1 year ago - 1 comment
Labels: enhancement

#190 - fix: added `systemd-timesyncd` to use_time_sync script (#189)

Pull Request - State: closed - Opened by thejandg about 1 year ago

#189 - Script 2.2.1.1_use_time_sync not checking for systemd-timesyncd

Issue - State: closed - Opened by thejandg about 1 year ago - 2 comments
Labels: enhancement

#188 - fix: enhance test 99.1.3 speed for large /etc/sudoers.d folders

Pull Request - State: closed - Opened by speed47 about 1 year ago

#187 - feat: Add experimental debian12 functionnal tests

Pull Request - State: closed - Opened by tdenof about 1 year ago

#186 - fix: 99.1.3_acc_sudoers_no_all: fix a race condition

Pull Request - State: closed - Opened by speed47 about 1 year ago

#184 - build(deps): bump dev-drprasad/delete-tag-and-release from 0.2.1 to 1.0.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#183 - Debian 11 goes into tty mode(commmand line mode) after apply level 3 hardening

Issue - State: open - Opened by Malikjawad05 over 1 year ago - 2 comments
Labels: question