Skip to content

Commit

Permalink
Remove Debian 9 from products
Browse files Browse the repository at this point in the history
  • Loading branch information
Mab879 committed Sep 19, 2022
1 parent 5ead072 commit e02980a
Show file tree
Hide file tree
Showing 40 changed files with 40 additions and 45 deletions.
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: debian10,debian11,debian9,ubuntu1604,ubuntu1804,ubuntu2004,ubuntu2204
prodtype: debian10,debian11,ubuntu1604,ubuntu1804,ubuntu2004,ubuntu2204

title: 'Disable unauthenticated repositories in APT configuration'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: debian10,debian11,debian9
prodtype: debian10,debian11

title: 'Ensure that official distribution repositories are used'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: debian10,debian11,debian9,fedora,ol7,ol8,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: debian10,debian11,fedora,ol7,ol8,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Uninstall net-snmp Package'

Expand Down Expand Up @@ -43,7 +43,6 @@ template:
name: package_removed
vars:
pkgname: net-snmp
pkgname@debian9: snmp
pkgname@debian10: snmp
pkgname@debian11: snmp
pkgname@ubuntu1604: snmp
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,rhel7,rhel8,rhel9,sle15
prodtype: alinux2,alinux3,debian10,debian11,rhel7,rhel8,rhel9,sle15

title: 'Disable snmpd Service'

Expand Down Expand Up @@ -38,7 +38,6 @@ template:
name: service_disabled
vars:
servicename: snmpd
packagename@debian9: snmpd
packagename@debian10: snmpd
packagename@debian11: snmpd
packagename: net-snmp
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# platform = debian 11,debian 10,debian 9,multi_platform_fedora,Oracle Linux 7,Oracle Linux 8,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8
# platform = debian 11,debian 10,multi_platform_fedora,Oracle Linux 7,Oracle Linux 8,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8
# reboot = false
# strategy = configure
# complexity = low
Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# platform = debian 11,debian 10,debian 9,multi_platform_fedora,Oracle Linux 7,Oracle Linux 8,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8
# platform = debian 11,debian 10,multi_platform_fedora,Oracle Linux 7,Oracle Linux 8,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8

{{{ bash_instantiate_variables("var_snmpd_ro_string", "var_snmpd_rw_string") }}}

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: debian10,debian11,debian9,fedora,ol7,ol8,rhel7,rhel8
prodtype: debian10,debian11,fedora,ol7,ol8,rhel7,rhel8

title: 'Ensure Default SNMP Password Is Not Used'

Expand Down
3 changes: 1 addition & 2 deletions linux_os/guide/services/ssh/service_sshd_disabled/rule.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ title: 'Disable SSH Server If Possible (Unusual)'
description: |-
The SSH server service, sshd, is commonly needed.
However, if it can be disabled, do so.
{{% if product in ['debian9', 'debian10', 'debian11', 'ubuntu1604', 'ubuntu1804'] %}}
{{% if product in ['debian10', 'debian11', 'ubuntu1604', 'ubuntu1804'] %}}
{{{ describe_service_disable(service="sshd") }}}
{{% else %}}
{{{ describe_service_disable(service="sshd") }}}
Expand All @@ -30,7 +30,6 @@ template:
packagename: openssh-server
packagename@opensuse: openssh
packagename@sle12: openssh
daemonname@debian9: ssh
daemonname@debian10: ssh
daemonname@debian11: ssh
daemonname@ubuntu1604: ssh
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,6 @@ references:
cis@alinux2: 5.2.7
cis@alinux3: 5.2.7
cis@debian11: 9.3.5
cis@debian9: 9.3.5
cis@rhel7: 5.3.7
cis@rhel8: 5.2.16
cis@sle12: 5.3.8
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,uos20
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,uos20

title: 'Ensure auditd Collects File Deletion Events by User'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15

title: 'Ensure auditd Collects Unauthorized Access Attempts to Files (unsuccessful)'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Record Unsuccessful Access Attempts to Files - creat'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Record Unsuccessful Access Attempts to Files - ftruncate'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Record Unsuccessful Access Attempts to Files - open'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Record Unsuccessful Access Attempts to Files - open_by_handle_at'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Record Unsuccessful Access Attempts to Files - openat'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Record Unsuccessful Access Attempts to Files - truncate'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15

title: 'Ensure auditd Collects Information on Kernel Module Loading and Unloading'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Ensure auditd Collects Information on Kernel Module Unloading - delete_module'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Ensure auditd Collects Information on Kernel Module Loading and Unloading - finit_module'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Ensure auditd Collects Information on Kernel Module Loading - init_module'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15
prodtype: alinux2,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15

title: 'Record Attempts to Alter Logon and Logout Events'

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
{{% endif %}}
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15

title: 'Record Attempts to Alter Logon and Logout Events - faillock'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Record Attempts to Alter Logon and Logout Events - lastlog'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Record Attempts to Alter Logon and Logout Events - tallylog'

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -59,6 +59,6 @@ template:
pkgname@ubuntu1604: auditd
pkgname@ubuntu1804: auditd
pkgname@ubuntu2004: auditd
pkgname@debian9: auditd

pkgname@debian10: auditd
pkgname@debian11: auditd
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,6 @@ template:
vars:
servicename: auditd
packagename: audit
packagename@debian9: auditd
packagename@debian10: auditd
packagename@debian11: auditd
packagename@ubuntu1604: auditd
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
{{{ oval_metadata("All syslog log files should be owned by the appropriate group.") }}}

<criteria operator="AND">
{{% if product in ["debian9", "debian10", "debian11", "ubuntu1604"] %}}
{{% if product in ["debian10", "debian11", "ubuntu1604"] %}}
<extend_definition comment="rsyslog daemon is used as local logging daemon" definition_ref="package_rsyslog_installed" />
{{% endif %}}
<criterion comment="Check if all system log files are owned by the appropriate group" test_ref="test_rsyslog_files_groupownership" />
Expand Down Expand Up @@ -106,7 +106,7 @@

<unix:file_state id="state_rsyslog_files_groupownership" version="1">
<unix:type operation="equals">regular</unix:type>
{{% if product in ["debian9", "debian10", "debian11", "ubuntu1604", "ubuntu2004", "ubuntu2204"] %}}
{{% if product in ["debian10", "debian11", "ubuntu1604", "ubuntu2004", "ubuntu2204"] %}}
<unix:group_id datatype="int">4</unix:group_id>
{{% else %}}
<unix:group_id datatype="int">0</unix:group_id>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
- name: "Set rsyslog logfile configuration facts"
set_fact:
rsyslog_etc_config: "/etc/rsyslog.conf"
{{% if product in ["debian9", "debian10", "debian11", "ubuntu1604", "ubuntu1804", "ubuntu2004", "ubuntu2204", "sle15", "sle12"] %}}
{{% if product in ["debian10", "debian11", "ubuntu1604", "ubuntu1804", "ubuntu2004", "ubuntu2204", "sle15", "sle12"] %}}
desired_perm_mode: "640"
{{% else %}}
desired_perm_mode: "600"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,7 @@ do
unset ARRAY_FOR_LOG_FILE
fi
done
{{% if product in ["debian9", "debian10", "debian11", "ubuntu1604", "ubuntu1804", "ubuntu2004", "ubuntu2204", "sle15", "sle12"] %}}
{{% if product in ["debian10", "debian11", "ubuntu1604", "ubuntu1804", "ubuntu2004", "ubuntu2204", "sle15", "sle12"] %}}
DESIRED_PERM_MOD=640
{{% else %}}
DESIRED_PERM_MOD=600
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
{{{ oval_metadata("File permissions for all syslog log files should be set correctly.") }}}

<criteria operator="AND">
{{% if product in ["debian9", "debian10", "debian11", "ubuntu1604", "ubuntu1804"] %}}
{{% if product in ["debian10", "debian11", "ubuntu1604", "ubuntu1804"] %}}
<extend_definition comment="rsyslog daemon is used as local logging daemon" definition_ref="package_rsyslog_installed" />
{{% endif %}}
<criterion comment="Check permissions of all system log files" test_ref="test_rsyslog_files_permissions" />
Expand Down Expand Up @@ -117,7 +117,7 @@
<unix:file_state id="state_rsyslog_files_permissions" version="1">
<unix:type operation="equals">regular</unix:type>
<unix:uexec datatype="boolean">false</unix:uexec>
{{% if product in ["debian9", "debian10", "debian11", "ubuntu1604", "ubuntu1804", "ubuntu2004", "ubuntu2204", "sle15", "sle12"] %}}
{{% if product in ["debian10", "debian11", "ubuntu1604", "ubuntu1804", "ubuntu2004", "ubuntu2204", "sle15", "sle12"] %}}
<unix:gread datatype="boolean">true</unix:gread>
{{% else %}}
<unix:gread datatype="boolean">false</unix:gread>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ template:
sysctlvar: net.ipv4.ip_forward
sysctlval: '0'
datatype: int
sysctlval@debian9: ''

sysctlval@debian10: ''
sysctlval@debian11: ''
sysctlval@ubuntu1604: ''
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ template:
vars:
filepath: /etc/gshadow-
filegid: '0'
filegid@debian9: '42'

filegid@debian10: '42'
filegid@debian11: '42'
filegid@ubuntu1604: '42'
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ template:
vars:
filepath: /etc/gshadow
filegid: '0'
filegid@debian9: '42'

filegid@debian10: '42'
filegid@debian11: '42'
filegid@ubuntu1604: '42'
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ template:
vars:
filepath: /etc/gshadow-
filemode: '0000'
filemode@debian9: '0640'

filemode@debian10: '0640'
filemode@debian11: '0640'
filemode@ubuntu1604: '0640'
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ template:
vars:
filepath: /etc/shadow-
filemode: '0000'
filemode@debian9: '0640'

filemode@debian10: '0640'
filemode@debian11: '0640'
filemode@ubuntu1604: '0640'
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ template:
vars:
filepath: /etc/gshadow
filemode: '0000'
filemode@debian9: '0640'

filemode@debian10: '0640'
filemode@debian11: '0640'
filemode@ubuntu1604: '0640'
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,7 @@ template:
vars:
filepath: /etc/shadow
filemode: '0000'
filemode@debian9: '0640'

filemode@debian10: '0640'
filemode@debian11: '0640'
filemode@ubuntu1604: '0640'
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Build and Test AIDE Database'

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
documentation_complete: true

prodtype: alinux2,alinux3,debian10,debian11,debian9,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204
prodtype: alinux2,alinux3,debian10,debian11,fedora,ol7,ol8,ol9,rhcos4,rhel7,rhel8,rhel9,rhv4,sle12,sle15,ubuntu2004,ubuntu2204

title: 'Install AIDE'

Expand Down

0 comments on commit e02980a

Please sign in to comment.