commit
						66ae34de32
					
				|  | @ -10,7 +10,7 @@ kernel-param: | ||||||
|       server: 1 |       server: 1 | ||||||
|       workstation: 1 |       workstation: 1 | ||||||
|       CIS_ID: |       CIS_ID: | ||||||
|       - 1.5.1 |       - 1.5.2 | ||||||
|       CISv8: 10.5 |       CISv8: 10.5 | ||||||
|       CISv8_IG1: false |       CISv8_IG1: false | ||||||
|       CISv8_IG2: true |       CISv8_IG2: true | ||||||
|  | @ -18,7 +18,7 @@ kernel-param: | ||||||
|       NIST800-53R5: CM-6 |       NIST800-53R5: CM-6 | ||||||
| command: | command: | ||||||
|   ptrace_restrict_2: |   ptrace_restrict_2: | ||||||
|     title: 1.5.1 | Ensure ptrace_scope is restricted | sysctl_configured |     title: 1.5.2 | Ensure ptrace_scope is restricted | sysctl_configured | ||||||
|     exit-status: |     exit-status: | ||||||
|       or: |       or: | ||||||
|       - 0 |       - 0 | ||||||
|  | @ -30,7 +30,7 @@ command: | ||||||
|       server: 1 |       server: 1 | ||||||
|       workstation: 1 |       workstation: 1 | ||||||
|       CIS_ID: |       CIS_ID: | ||||||
|       - 1.5.1 |       - 1.5.2 | ||||||
|       CISv8: 10.5 |       CISv8: 10.5 | ||||||
|       CISv8_IG1: false |       CISv8_IG1: false | ||||||
|       CISv8_IG2: true |       CISv8_IG2: true | ||||||
|  |  | ||||||
|  | @ -27,7 +27,7 @@ kernel-param: | ||||||
|       server: 1 |       server: 1 | ||||||
|       workstation: 1 |       workstation: 1 | ||||||
|       CIS_ID: |       CIS_ID: | ||||||
|       - 3.2.6 |       - 3.3.6 | ||||||
|       CISv8: |       CISv8: | ||||||
|       - 4.8 |       - 4.8 | ||||||
|       CISv8_IG1: false |       CISv8_IG1: false | ||||||
|  |  | ||||||
|  | @ -8,7 +8,7 @@ kernel-param: | ||||||
|       server: 1 |       server: 1 | ||||||
|       workstation: 1 |       workstation: 1 | ||||||
|       CIS_ID: |       CIS_ID: | ||||||
|       - 3.3.1 |       - 3.3.8 | ||||||
|       CISv8: |       CISv8: | ||||||
|       - 4.8 |       - 4.8 | ||||||
|       CISv8_IG1: false |       CISv8_IG1: false | ||||||
|  |  | ||||||
|  | @ -4,7 +4,7 @@ | ||||||
|   {{ if .Vars.ubtu24cis_rule_5_1_13 }} |   {{ if .Vars.ubtu24cis_rule_5_1_13 }} | ||||||
| file: | file: | ||||||
|   ssh_logingrace: |   ssh_logingrace: | ||||||
|     title: 5.1.21 | Ensure sshd LoginGraceTime is configured |     title: 5.1.13 | Ensure sshd LoginGraceTime is configured | ||||||
|     path: /etc/ssh/sshd_config |     path: /etc/ssh/sshd_config | ||||||
|     exists: true |     exists: true | ||||||
|     contents: |     contents: | ||||||
|  |  | ||||||
|  | @ -12,7 +12,7 @@ command: | ||||||
|       server: 1 |       server: 1 | ||||||
|       workstation: 1 |       workstation: 1 | ||||||
|       CIS_ID: |       CIS_ID: | ||||||
|       - 5.1.3 |       - 5.1.2 | ||||||
|       CISv8: |       CISv8: | ||||||
|       - 3.3 |       - 3.3 | ||||||
|       CISv8_IG1: true |       CISv8_IG1: true | ||||||
|  |  | ||||||
|  | @ -17,7 +17,7 @@ command: | ||||||
|       server: 1 |       server: 1 | ||||||
|       workstation: 1 |       workstation: 1 | ||||||
|       CIS_ID: |       CIS_ID: | ||||||
|       - 5.3.3.2.7 |       - 5.3.3.2.8 | ||||||
|       CISv8: |       CISv8: | ||||||
|       - 5.2 |       - 5.2 | ||||||
|       CISv8_IG1: true |       CISv8_IG1: true | ||||||
|  |  | ||||||
|  | @ -25,7 +25,7 @@ command: | ||||||
|       - AU-3 |       - AU-3 | ||||||
|       - CM-6 |       - CM-6 | ||||||
|   auditd_MAC_live: |   auditd_MAC_live: | ||||||
|     title: 6.2.6 | Ensure events that modify the system's Mandatory Access Controls are collected | Live |     title: 6.2.3.14 | Ensure events that modify the system's Mandatory Access Controls are collected | Live | ||||||
|     exec: auditctl -l | grep MAC-policy |     exec: auditctl -l | grep MAC-policy | ||||||
|     exit-status: 0 |     exit-status: 0 | ||||||
|     stdout: |     stdout: | ||||||
|  |  | ||||||
|  | @ -33,6 +33,8 @@ command: | ||||||
|     meta: |     meta: | ||||||
|       server: 2 |       server: 2 | ||||||
|       workstation: 2 |       workstation: 2 | ||||||
|  |       CIS_ID: | ||||||
|  |       - 6.2.3.19 | ||||||
|       CISv8: |       CISv8: | ||||||
|       - 8.5 |       - 8.5 | ||||||
|       CISv8_IG1: false |       CISv8_IG1: false | ||||||
|  |  | ||||||
		Loading…
	
		Reference in New Issue
	
	 uk-bolly
						uk-bolly