Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Benchmark Version 1 Rev. 2 and other fixes #44

Merged
merged 117 commits into from
Aug 19, 2021
Merged

Benchmark Version 1 Rev. 2 and other fixes #44

merged 117 commits into from
Aug 19, 2021

Conversation

georgenalen
Copy link
Contributor

Issues Addressed:
#26 - Errors on IPv6 disabled systems
#30 - Script overwriting new mount options
#40 - ssd.conf issues

Enhancements

  • Updates for benchmark version 1 release 2
  • Improvements to controls requiring reboots
  • Improved FIPS logic
  • Rocky and Alma
  • Updates to support Audit feature
  • Improved postfix logic
  • Updated to use package module instead of dnf module
    Signed-off-by: George Nalen [email protected]

uk-bolly and others added 30 commits July 13, 2021 12:10
@uk-bolly
cat1_initial v1.2
a0b79ae 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
cat1_initial audit
98e26f3 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
Updated for v1.2
80440fc 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
added more vars for cat1
0a92df1 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
extended tags
3dd2803 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
Added testing config
e376f1e 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
Added audit steps
5ea476d 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
improved logic using ansible_fips
8ea4ffd 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
fixed layout
6b5e9b2 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
Added Rocky
6f0e8c8 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
standardise layout
3aaa17d 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
audit alignment updates
b9ce11c 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
updated vars for audit
bc4471a 
Signed-off-by: Mark Bolwell <[email protected]>
@georgenalen
Updated fix-cat2.yml to have latest just incase
99a2fc1 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Fixed Cat2
c210739 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Updated fix-cat1.yml just incase
54d284a 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Updated fix-cat3.yml to be 1.2 compliant with new tags
44936d6 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Updated fix-cat1 adn fix-cat3 for linting
5e51a7f 
Signed-off-by: George Nalen <[email protected]>
@uk-bolly
Added new audit vars to files
560010f 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
Added tag to prelim
4213147 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
moved bootloader check to prelim
54bec53 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
Merge branch 'bolly_new_stig' into stig_v1r2
a553df0 
Audit variable updates
@georgenalen
Updated cat2 1-2
ec7287c 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Updated cat2 3-10
e672bde 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Updated cat2 11-22
359fa07 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Updated cat2 22-30
dfb5a4a 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Updated cat2 31-40
568a6ae 
Signed-off-by: George Nalen <[email protected]>
@uk-bolly
Added Alma to os_ver supported
7300b25 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
moved reboot and updated to use module
b10632e 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
Merge branch 'stig_v1r2' of github.com:ansible-lockdown/RHEL8-STIG in…
260d79d 
…to stig_v1r2
georgenalen and others added 29 commits August 16, 2021 13:26
@georgenalen
updated 020022 typo found by @JSurf
b5c26c1 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Adjusted pamd controls to use default faillock suggested by @JSurf
12ae2cb 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Addressed issue #26 related to IPv6 sysctl reloads
725bd51 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
fixed 040161 title typo
aeb29b1 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
fixed missing 08 typos in titles
8e1c961 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
fixed missing 08 typos in titles part 2
517f8a5 
Signed-off-by: George Nalen <[email protected]>
@uk-bolly
fixed dod banner check
8fddbc9 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
fixed sssd logic
58cb782 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
#40 sssd improvements thanks to jsurf
e369afb 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
improved sssd check
5a2318b 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
increased default timeout
1569ba9 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
fixed title typo
cda0ff7 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
Merge pull request #41 from ansible-lockdown/sssd_v1r2_updates
1a3c13f 
Sssd v1r2 updates
@uk-bolly
uid facts in prelim update
98e5659 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
fix conditional logic
a95b152 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
Added setting to template
a62f0ae 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
Merge pull request #42 from ansible-lockdown/stig_tweaks
9e2f483 
Stig tweaks
@georgenalen
changed dnf to package module, addressed 040140 and 020340 issues
474cf0f 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Merge branch 'stig_v1r2' of github.com:ansible-lockdown/RHEL8-STIG in…
116e492 
…to stig_v1r2
@georgenalen
Updated some elements after testing
50bf6b0 
Signed-off-by: George Nalen <[email protected]>
@uk-bolly
fixed ciphers
dae0e6f 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
linting
df47c3f 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
removed files no longer needed
a6c1db7 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
updated path
4e8ab72 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
updated 010020 conditional & notify
782c14e 
Signed-off-by: Mark Bolwell <[email protected]>
@uk-bolly
added default reboot to false & conditional logic
b5d587a 
Signed-off-by: Mark Bolwell <[email protected]>
@georgenalen
updated readme
ee2d4e9 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Updated to finalized README
0bf53e5 
Signed-off-by: George Nalen <[email protected]>
@georgenalen
Merge pull request #43 from ansible-lockdown/stig_v1r2
69e8c1d 
Stig v1r2
Signed-off-by: George Nalen <[email protected]>
@georgenalen georgenalen merged commit 3e411d4 into main Aug 19, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@georgenalen @uk-bolly