meta updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
171b97c379
commit
0903a24e2b
|
@ -10,7 +10,7 @@ kernel-param:
|
|||
server: 1
|
||||
workstation: 1
|
||||
CIS_ID:
|
||||
- 1.5.1
|
||||
- 1.5.2
|
||||
CISv8: 10.5
|
||||
CISv8_IG1: false
|
||||
CISv8_IG2: true
|
||||
|
@ -18,7 +18,7 @@ kernel-param:
|
|||
NIST800-53R5: CM-6
|
||||
command:
|
||||
ptrace_restrict_2:
|
||||
title: 1.5.1 | Ensure ptrace_scope is restricted | sysctl_configured
|
||||
title: 1.5.2 | Ensure ptrace_scope is restricted | sysctl_configured
|
||||
exit-status:
|
||||
or:
|
||||
- 0
|
||||
|
@ -30,7 +30,7 @@ command:
|
|||
server: 1
|
||||
workstation: 1
|
||||
CIS_ID:
|
||||
- 1.5.1
|
||||
- 1.5.2
|
||||
CISv8: 10.5
|
||||
CISv8_IG1: false
|
||||
CISv8_IG2: true
|
||||
|
|
|
@ -27,7 +27,7 @@ kernel-param:
|
|||
server: 1
|
||||
workstation: 1
|
||||
CIS_ID:
|
||||
- 3.2.6
|
||||
- 3.3.6
|
||||
CISv8:
|
||||
- 4.8
|
||||
CISv8_IG1: false
|
||||
|
|
|
@ -8,7 +8,7 @@ kernel-param:
|
|||
server: 1
|
||||
workstation: 1
|
||||
CIS_ID:
|
||||
- 3.3.1
|
||||
- 3.3.8
|
||||
CISv8:
|
||||
- 4.8
|
||||
CISv8_IG1: false
|
||||
|
|
|
@ -4,7 +4,7 @@
|
|||
{{ if .Vars.ubtu24cis_rule_5_1_13 }}
|
||||
file:
|
||||
ssh_logingrace:
|
||||
title: 5.1.21 | Ensure sshd LoginGraceTime is configured
|
||||
title: 5.1.13 | Ensure sshd LoginGraceTime is configured
|
||||
path: /etc/ssh/sshd_config
|
||||
exists: true
|
||||
contents:
|
||||
|
|
|
@ -12,7 +12,7 @@ command:
|
|||
server: 1
|
||||
workstation: 1
|
||||
CIS_ID:
|
||||
- 5.1.3
|
||||
- 5.1.2
|
||||
CISv8:
|
||||
- 3.3
|
||||
CISv8_IG1: true
|
||||
|
|
|
@ -17,7 +17,7 @@ command:
|
|||
server: 1
|
||||
workstation: 1
|
||||
CIS_ID:
|
||||
- 5.3.3.2.7
|
||||
- 5.3.3.2.8
|
||||
CISv8:
|
||||
- 5.2
|
||||
CISv8_IG1: true
|
||||
|
|
|
@ -25,7 +25,7 @@ command:
|
|||
- AU-3
|
||||
- CM-6
|
||||
auditd_MAC_live:
|
||||
title: 6.2.6 | Ensure events that modify the system's Mandatory Access Controls are collected | Live
|
||||
title: 6.2.3.14 | Ensure events that modify the system's Mandatory Access Controls are collected | Live
|
||||
exec: auditctl -l | grep MAC-policy
|
||||
exit-status: 0
|
||||
stdout:
|
||||
|
|
|
@ -33,6 +33,8 @@ command:
|
|||
meta:
|
||||
server: 2
|
||||
workstation: 2
|
||||
CIS_ID:
|
||||
- 6.2.3.19
|
||||
CISv8:
|
||||
- 8.5
|
||||
CISv8_IG1: false
|
||||
|
|
Loading…
Reference in New Issue