Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / ovh/debian-cis issues and pull requests

#244 - Root

Issue - State: open - Opened by firman487 about 2 months ago

#243 - build(deps): bump luizm/action-sh-checker from 0.8.0 to 0.9.0

Pull Request - State: open - Opened by dependabot[bot] 2 months ago - 8 comments
Labels: dependencies

#242 - Auto Installer

Pull Request - State: open - Opened by SleepTheGod 2 months ago - 1 comment

#241 - Disable all file systems not actively used

Issue - State: open - Opened by wilsonmar 3 months ago

#240 - Possible to use for Proxmox-Hosts?

Issue - State: open - Opened by JSuenram 6 months ago - 4 comments

#239 - 5.4.5_default_timeout.sh missing HARDENING_LEVEL

Issue - State: open - Opened by CookieCr2nk 7 months ago

#238 - build(deps): bump dev-drprasad/delete-tag-and-release from 1.0.1 to 1.1

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 8 comments
Labels: dependencies

#237 - fix: invalid behavior on sid/alternative in 5.3.4/99.5.4.5.1

Pull Request - State: closed - Opened by sinrazon 9 months ago - 2 comments

#236 - fix: catch cidr network in ssh keys

Pull Request - State: closed - Opened by Isma399 9 months ago

#235 - What CIS Benchmark is used exactly ? What do I implement ?

Issue - State: closed - Opened by ManuGithubSteam 9 months ago - 1 comment

#234 - build(deps): bump metcalfc/changelog-generator from 4.2.0 to 4.3.1

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago - 16 comments
Labels: dependencies

#233 - Ignoring path requires 3 different variables

Issue - State: open - Opened by sblaisot 10 months ago - 1 comment
Labels: enhancement

#232 - fix: allow set-hardening-level option usage

Pull Request - State: closed - Opened by ThibaultDewailly 10 months ago - 13 comments

#231 - How to use debian-cis? [explained for non expert Linux admins]

Issue - State: closed - Opened by bluepuma77 10 months ago - 5 comments

#230 - hardening.sh --set-hardening-level does not work

Issue - State: closed - Opened by highwayfixerman 10 months ago - 1 comment
Labels: bug

#229 - build(deps): bump metcalfc/changelog-generator from 4.2.0 to 4.3.0

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 9 comments
Labels: dependencies

#228 - allow multiple users in 5.2.18

Pull Request - State: closed - Opened by lgaida 11 months ago

#226 - Syslog-ng fixes and enhancements

Pull Request - State: closed - Opened by ThibaultDewailly 11 months ago

#225 - fix: Allow --only option to be called multiple times

Pull Request - State: closed - Opened by ThibaultDewailly 11 months ago

#224 - Use multiple scripts with only option

Issue - State: closed - Opened by foolished129 11 months ago - 1 comment

#223 - fix: update Readme to clarify project usage

Pull Request - State: closed - Opened by ThibaultDewailly 11 months ago

#222 - fix: typo in README. Update example of --audit usage

Pull Request - State: closed - Opened by ThibaultDewailly 11 months ago

#221 - Allow multiple exception users to be defined for 99.5.2.4_ssh_keys_from

Pull Request - State: closed - Opened by lgaida 11 months ago - 2 comments
Labels: enhancement

#220 - Fix Quickstart, missing character

Issue - State: closed - Opened by bluepuma77 12 months ago - 1 comment

#219 - Update README.md to Represent Actual Hardening Abilities

Issue - State: closed - Opened by jessejcollins 12 months ago - 1 comment

#218 - Seeking approval for relicensing of software

Issue - State: closed - Opened by JeremiahSecrist 12 months ago - 1 comment

#216 - Adapt all scripts to yescrypt

Pull Request - State: closed - Opened by speed47 12 months ago - 1 comment

#215 - fix: clean obsolete check 99.5.4.5.1, now handled by 5.3.4

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago

#214 - build(deps): bump metcalfc/changelog-generator from 4.1.0 to 4.2.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#213 - enh: remove ssh system sandbox check

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago

#212 - Deprecated check 99.5.2.8_ssh_sys_sandbox

Issue - State: closed - Opened by agrimal about 1 year ago - 1 comment
Labels: enhancement

#211 - Unable to deploy this script on Ubuntu 22.o LTS

Issue - State: closed - Opened by Vincentssssssss about 1 year ago - 5 comments
Labels: question

#210 - build(deps): bump luizm/action-sh-checker from 0.7.0 to 0.8.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#209 - Password hashes in /etc/shadow not SHA512

Issue - State: closed - Opened by ITNerdbox about 1 year ago - 1 comment
Labels: enhancement

#208 - fix: root_dir is still /opt/cis-hardenign for the moment

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago - 1 comment

#207 - fix: debian12 functional test pass is now mandatory

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago

#206 - feat: Officialize Debian 12 support

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago

#205 - Update the documentation and add a debian/changelog entry

Pull Request - State: closed - Opened by P-EB about 1 year ago - 2 comments

#204 - Replace CIS_ROOT_DIR by a more flexible system

Pull Request - State: closed - Opened by P-EB about 1 year ago - 7 comments

#203 - feat: add nftables to firewall software allow list

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago - 1 comment

#202 - build(deps): bump actions/checkout from 3 to 4

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#201 - CIS Benchmark numbering doesn't match CIS official docs

Issue - State: closed - Opened by moshe about 1 year ago - 1 comment

#200 - Is this script compatible with Debian 12 ?

Issue - State: closed - Opened by AkechiShiro about 1 year ago - 2 comments

#198 - fix: chore debian manual update

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago

#197 - fix: chore, debug logs print correctly now

Pull Request - State: closed - Opened by ThibaultDewailly about 1 year ago

#195 - Debain 11 Crashed when enable selinux enforcing mode

Issue - State: open - Opened by Malikjawad05 about 1 year ago - 1 comment
Labels: question

#194 - Add bind mount support

Pull Request - State: closed - Opened by SteamedFish over 1 year ago - 1 comment

#193 - Update warn messages on 2.2.15_mta_localhost.sh

Pull Request - State: closed - Opened by JugeHuge over 1 year ago

#192 - ntp service is checked even chrony is installed and configured

Issue - State: closed - Opened by JugeHuge over 1 year ago - 7 comments
Labels: enhancement, question

#191 - nftables is not checked.

Issue - State: closed - Opened by JugeHuge over 1 year ago - 1 comment
Labels: enhancement

#190 - fix: added `systemd-timesyncd` to use_time_sync script (#189)

Pull Request - State: closed - Opened by thejandg over 1 year ago

#189 - Script 2.2.1.1_use_time_sync not checking for systemd-timesyncd

Issue - State: closed - Opened by thejandg over 1 year ago - 2 comments
Labels: enhancement

#188 - fix: enhance test 99.1.3 speed for large /etc/sudoers.d folders

Pull Request - State: closed - Opened by speed47 over 1 year ago

#187 - feat: Add experimental debian12 functionnal tests

Pull Request - State: closed - Opened by tdenof over 1 year ago

#186 - fix: 99.1.3_acc_sudoers_no_all: fix a race condition

Pull Request - State: closed - Opened by speed47 over 1 year ago

#184 - build(deps): bump dev-drprasad/delete-tag-and-release from 0.2.1 to 1.0.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#183 - Debian 11 goes into tty mode(commmand line mode) after apply level 3 hardening

Issue - State: open - Opened by Malikjawad05 over 1 year ago - 2 comments
Labels: question

#182 - Does the about section need to be updated?

Issue - State: closed - Opened by brizzolazzi over 1 year ago - 3 comments
Labels: enhancement

#181 - fix: correct debian package compression override

Pull Request - State: closed - Opened by ThibaultDewailly over 1 year ago

#180 - fix: force xz compression during .deb build

Pull Request - State: closed - Opened by ThibaultDewailly over 1 year ago

#179 - fix: change auditd file rule remediation

Pull Request - State: closed - Opened by ThibaultDewailly over 1 year ago

#178 - fix: correct search in 5.4.5_default_timeout in apply mode

Pull Request - State: closed - Opened by ThibaultDewailly over 1 year ago

#177 - fix: ensure mountpoints are properly detected

Pull Request - State: closed - Opened by ThibaultDewailly over 1 year ago - 1 comment

#176 - feat: official Debian 11 compatibility

Pull Request - State: closed - Opened by ThibaultDewailly over 1 year ago

#174 - deprecation: Remove Debian 9 from supported version.

Pull Request - State: closed - Opened by ThibaultDewailly over 1 year ago

#173 - Create run_cis_report.sh

Pull Request - State: closed - Opened by jiaweizhong-bytednace over 1 year ago

#172 - Feat: Add rules-details option

Pull Request - State: closed - Opened by fe80 over 1 year ago - 1 comment

#171 - Bump luizm/action-sh-checker from 0.5.0 to 0.7.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago

#170 - Bump dev-drprasad/delete-tag-and-release from 0.2.0 to 0.2.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#169 - Bump metcalfc/changelog-generator from 3.0.0 to 4.1.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#168 - fix: timeout of 99.1.3

Pull Request - State: closed - Opened by speed47 almost 2 years ago - 2 comments

#167 - 99.1.3_acc_sudoers_no_all.sh: timeout with large sudoers.d/

Issue - State: closed - Opened by speed47 almost 2 years ago
Labels: enhancement

#166 - Bump metcalfc/changelog-generator from 3.0.0 to 4.0.1

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago - 1 comment
Labels: dependencies

#165 - Audit logging rules not persistent

Issue - State: closed - Opened by fiasomj about 2 years ago

#164 - fix(6.2.9): Start from UID 1000 for home ownership check

Pull Request - State: closed - Opened by tdenof about 2 years ago

#163 - Double users_valid_homedir.sh

Issue - State: closed - Opened by wilfriedroset about 2 years ago - 1 comment
Labels: bug

#162 - Debian 11 support ?

Issue - State: closed - Opened by inf0rmix about 2 years ago - 1 comment

#161 - Bump luizm/action-sh-checker from 0.4.0 to 0.5.0

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#160 - bump to 3.7-1

Pull Request - State: closed - Opened by ymartin-ovh over 2 years ago

#158 - Adapt 5.3.4 (password hashing algorithm) to Debian11

Issue - State: closed - Opened by toutoen over 2 years ago

#157 - bump to 3.6-1

Pull Request - State: closed - Opened by tdenof over 2 years ago

#156 - feat: Filter the filesystem to check when the list is built.

Pull Request - State: closed - Opened by ymartin-ovh over 2 years ago - 2 comments

#154 - Bump luizm/action-sh-checker from 0.3.0 to 0.4.0

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#153 - Bump actions-ecosystem/action-get-latest-tag from 1.5.0 to 1.6.0

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago
Labels: dependencies

#152 - bump to 3.5-1

Pull Request - State: closed - Opened by tdenof over 2 years ago

#151 - fix: add 10s wait timeout on iptables command

Pull Request - State: closed - Opened by ThibaultDewailly over 2 years ago

#150 - bump to 3.4-1

Pull Request - State: closed - Opened by ThibaultDewailly over 2 years ago

#125 - WIP: Add rsyslog checks

Pull Request - State: closed - Opened by sblaisot about 3 years ago - 1 comment

#124 - wrong check of REMOTE_HOST in 4.2.1.6_remote_syslog-ng_acl.sh

Issue - State: closed - Opened by sblaisot about 3 years ago
Labels: bug

#116 - 5.4.5 Does Not Append Correctly Nor to Correct Files

Issue - State: closed - Opened by keithwoelke about 3 years ago - 1 comment
Labels: bug

#105 - Use a uniformized way to manage EXCEPTIONS

Issue - State: closed - Opened by thibaultserti over 3 years ago - 1 comment
Labels: enhancement

#101 - Bump actions-ecosystem/action-get-latest-tag from 1 to 1.4.1

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies