Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Rule 5.2.20 expects values different than 0, but previous form of the… #171

Closed
wants to merge 91 commits into from
Closed

Rule 5.2.20 expects values different than 0, but previous form of the… #171

wants to merge 91 commits into from

Commits on Nov 24, 2023

  1. Document variables in defaults/main.yml, Fix 2. 

    Signed-off-by: root@DERVISHx <[email protected]>
    @brisky
    brisky committed Nov 24, 2023
    Configuration menu
    Copy the full SHA
    a2162db View commit details
    Browse the repository at this point in the history

Commits on Nov 29, 2023

  1. Document variables in defaults/main.yml, Fix 5 from devel 

    Signed-off-by: root@DERVISHx <[email protected]>
    @brisky
    brisky committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    34b0521 View commit details
    Browse the repository at this point in the history

Commits on Dec 5, 2023

  1. Small additions to first part of documentation. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Dec 5, 2023
    Configuration menu
    Copy the full SHA
    dc59c32 View commit details
    Browse the repository at this point in the history

Commits on Dec 6, 2023

  1. Doc additions for: 

    - Yum repos,
- bootloader,
- crypto policies,
- SELinux
- NTP

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    06489db View commit details
    Browse the repository at this point in the history

Commits on Dec 7, 2023

  1. Doc additions for: 

    - Sections 2.2 && 2.3
- Section 3
- Section 4.1

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    6dfbe18 View commit details
    Browse the repository at this point in the history

Commits on Dec 8, 2023

  1. Last docs part - additions 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    28a61fa View commit details
    Browse the repository at this point in the history

Commits on Dec 27, 2023

  1. Added vars for streams. 

    Signed-off-by: root@DERVISHx <[email protected]>
    @brisky
    brisky committed Dec 27, 2023
    Configuration menu
    Copy the full SHA
    a57333d View commit details
    Browse the repository at this point in the history

Commits on Jan 17, 2024

  1. Finalising the docs content & syntax 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 17, 2024
    Configuration menu
    Copy the full SHA
    560475e View commit details
    Browse the repository at this point in the history

  2. Merge branch 'siemens/feat/document_main_variables' of code.siemens.c… 

    …om:infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/feat/document_main_variables
    @ipruteanu-sie
    ipruteanu-sie committed Jan 17, 2024
    Configuration menu
    Copy the full SHA
    14cd1e0 View commit details
    Browse the repository at this point in the history

Commits on Jan 19, 2024

  1. Merge branch 'devel' of github.com:siemens/RHEL9-CIS into siemens/fea… 

    …t/document_main_variables
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    677424d View commit details
    Browse the repository at this point in the history

  2. Documenting usage of chrony variables. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    8fc85fc View commit details
    Browse the repository at this point in the history

  3. Improving doc for journald log parameters. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    b4bef29 View commit details
    Browse the repository at this point in the history

  4. Revert "Added vars for streams." 

    [IP] I see no benefit to duplicate vars in defaults/main.yml in other files like specific vars for Alma/Rocky, especially since
we're using the same values for those vars. Also, replacing rsyslog with journald is not fine for this current doc-extension proposal.

This reverts commit a57333d.
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    073f6b7 View commit details
    Browse the repository at this point in the history

  5. Using again the default values used by Lockdown for sshd vars, as the… 

    …y shouldn't be altered

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    48f0c7d View commit details
    Browse the repository at this point in the history

  6. Removing not useful line from docs 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    36ab51d View commit details
    Browse the repository at this point in the history

  7. Adding testfile with L1. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    dfffb19 View commit details
    Browse the repository at this point in the history

  8. Naming the Ansible vars in tesfile properly, with respect to rhel9 ta… 

    …sks.

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    f5b2299 View commit details
    Browse the repository at this point in the history

  9. new branch in Sfera_automation_pipeline, OIDC-testing 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    17592cc View commit details
    Browse the repository at this point in the history

  10. Adding newest test results for L2. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    3724f3f View commit details
    Browse the repository at this point in the history

  11. Adding CI file 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    3dde4b1 View commit details
    Browse the repository at this point in the history

  12. Using again sfera_automation_pipeline's master branch 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    7190ecb View commit details
    Browse the repository at this point in the history

  13. Adding testfile with L1. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    9614e9d View commit details
    Browse the repository at this point in the history

  14. As Nuno discovered, I was accidentally adding a new line(un-needed) 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    6ef4e38 View commit details
    Browse the repository at this point in the history

  15. Naming the Ansible vars in tesfile properly, with respect to rhel9 ta… 

    …sks.

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    19693c0 View commit details
    Browse the repository at this point in the history

  16. new branch in Sfera_automation_pipeline, OIDC-testing 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    a52d2a6 View commit details
    Browse the repository at this point in the history

  17. Adding newest test results for L2. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    d62e60d View commit details
    Browse the repository at this point in the history

  18. Using again sfera_automation_pipeline's master branch 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    c2630dc View commit details
    Browse the repository at this point in the history

  19. As Nuno discovered, I was accidentally adding a new line(un-needed) 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    5cb6108 View commit details
    Browse the repository at this point in the history

  20. Merge branch 'siemens/rhel9/devel' of code.siemens.com:infosec-pss-go… 

    …v/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/rhel9/devel
    @brisky @ipruteanu-sie
    brisky authored and ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    d6ae2b6 View commit details
    Browse the repository at this point in the history

  21. Fixing conflicts after rebasing branch:"/siemens/rhel9/devel" onto up… 

    …-to-date "devel" branch

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    06b39c0 View commit details
    Browse the repository at this point in the history

  22. new branch in Sfera_automation_pipeline, OIDC-testing 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    b89fa21 View commit details
    Browse the repository at this point in the history

  23. Adding newest test results for L2(rebasing siemens/rhel9/devel onto d… 

    …evel)

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    89d1373 View commit details
    Browse the repository at this point in the history

  24. Using again sfera_automation_pipeline's master branch 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    cd116a5 View commit details
    Browse the repository at this point in the history

  25. As Nuno discovered, I was accidentally adding a new line(un-needed) 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    b931555 View commit details
    Browse the repository at this point in the history

  26. Merge branch 'siemens/rhel9/devel' of code.siemens.com:infosec-pss-go… 

    …v/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/rhel9/devel
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    221f64d View commit details
    Browse the repository at this point in the history

  27. Solved minor conflicts in defaults/main.yml file, when re-basing 

    Signed-off-by: Marcin Dulinski <[email protected]>
    @dulin @ipruteanu-sie
    dulin authored and ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    9ce1fb6 View commit details
    Browse the repository at this point in the history

  28. Fixing conflicts after rebasing current feature branch onto 'devel'

    @brisky @ipruteanu-sie
    brisky authored and ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    da62626 View commit details
    Browse the repository at this point in the history

  29. Merge branch 'siemens/feat/document_main_variables' into siemens/rhel… 

    …9/devel
    @ipruteanu-sie
    ipruteanu-sie committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    e780e07 View commit details
    Browse the repository at this point in the history

Commits on Jan 25, 2024

  1. Updating the testfile with documented findings

    @ipruteanu-sie
    ipruteanu-sie committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    7bab634 View commit details
    Browse the repository at this point in the history

Commits on Jan 30, 2024

  1. new branch in Sfera_automation_pipeline, OIDC-testing 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    4cbc2e3 View commit details
    Browse the repository at this point in the history

  2. Adding CI file 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    0e671e8 View commit details
    Browse the repository at this point in the history

  3. Adding newest test results for L2. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    80fd642 View commit details
    Browse the repository at this point in the history

  4. Adding testfile with L1. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    5884ef4 View commit details
    Browse the repository at this point in the history

  5. Using again sfera_automation_pipeline's master branch 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    8bcb3c2 View commit details
    Browse the repository at this point in the history

  6. Naming the Ansible vars in tesfile properly, with respect to rhel9 ta… 

    …sks.

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    4dff7f0 View commit details
    Browse the repository at this point in the history

  7. As Nuno discovered, I was accidentally adding a new line(un-needed) 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    ad107e7 View commit details
    Browse the repository at this point in the history

  8. new branch in Sfera_automation_pipeline, OIDC-testing 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    8815f14 View commit details
    Browse the repository at this point in the history

  9. Adding newest test results for L2. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    3b91e9c View commit details
    Browse the repository at this point in the history

  10. Using again sfera_automation_pipeline's master branch 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    af7e032 View commit details
    Browse the repository at this point in the history

  11. As Nuno discovered, I was accidentally adding a new line(un-needed) 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    7641fd3 View commit details
    Browse the repository at this point in the history

  12. Merge branch 'siemens/rhel9/devel' of code.siemens.com:infosec-pss-go… 

    …v/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/rhel9/devel
    @brisky @ipruteanu-sie
    brisky authored and ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    a621341 View commit details
    Browse the repository at this point in the history

  13. Solving conflicts after latest rebase 

    ~~~~~
Document variables in defaults/main.yml, Fix 5 from devel

Signed-off-by: root@DERVISHx <[email protected]>
    @brisky @ipruteanu-sie
    brisky authored and ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    b262d0a View commit details
    Browse the repository at this point in the history

  14. Fixing conflicts after rebase --continue 

    Small additions to first part of documentation.

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    65aed53 View commit details
    Browse the repository at this point in the history

  15. Doc additions for: 

    - Yum repos,
- bootloader,
- crypto policies,
- SELinux
- NTP

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    490a47e View commit details
    Browse the repository at this point in the history

  16. Doc additions for: 

    - Sections 2.2 && 2.3
- Section 3
- Section 4.1

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    85ed8ce View commit details
    Browse the repository at this point in the history

  17. Fixing conflicts 

    Last docs part - additions

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    e40d8cb View commit details
    Browse the repository at this point in the history

  18. Added vars for streams. 

    Signed-off-by: root@DERVISHx <[email protected]>
Signed-off-by: Ionut Pruteanu <[email protected]>
    @brisky @ipruteanu-sie
    brisky authored and ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    5815c43 View commit details
    Browse the repository at this point in the history

  19. Rebasing 

    Signed-off-by: root@DERVISHx <[email protected]>
    @brisky @ipruteanu-sie
    brisky authored and ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    d1434f6 View commit details
    Browse the repository at this point in the history

  20. Finalising the docs content & syntax 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    159a06d View commit details
    Browse the repository at this point in the history

  21. Merge branch 'siemens/feat/document_main_variables' of code.siemens.c… 

    …om:infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/feat/document_main_variables
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    6744d90 View commit details
    Browse the repository at this point in the history

  22. Documenting usage of chrony variables. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    945e020 View commit details
    Browse the repository at this point in the history

  23. Improving doc for journald log parameters. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    674e0fd View commit details
    Browse the repository at this point in the history

  24. Revert "Added vars for streams." 

    [IP] I see no benefit to duplicate vars in defaults/main.yml in other files like specific vars for Alma/Rocky, especially since
we're using the same values for those vars. Also, replacing rsyslog with journald is not fine for this current doc-extension proposal.

This reverts commit a57333d.

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    f90a679 View commit details
    Browse the repository at this point in the history

  25. Removing not useful line from docs 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    efdff71 View commit details
    Browse the repository at this point in the history

  26. Solved minor conflicts in defaults/main.yml file, when re-basing 

    Signed-off-by: Marcin Dulinski <[email protected]>
Signed-off-by: Ionut Pruteanu <[email protected]>
    @dulin @ipruteanu-sie
    dulin authored and ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    0dab713 View commit details
    Browse the repository at this point in the history

  27. Fixing conflicts after rebasing current feature branch onto 'devel'

    @brisky @ipruteanu-sie
    brisky authored and ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    a3ddf8f View commit details
    Browse the repository at this point in the history

  28. Fixing conflicts after rebasing branch:"/siemens/rhel9/devel" onto up… 

    …-to-date "devel" branch

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    e62d048 View commit details
    Browse the repository at this point in the history

  29. new branch in Sfera_automation_pipeline, OIDC-testing 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    8ef4610 View commit details
    Browse the repository at this point in the history

  30. Adding newest test results for L2(rebasing siemens/rhel9/devel onto d… 

    …evel)

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    cc42640 View commit details
    Browse the repository at this point in the history

  31. Using again sfera_automation_pipeline's master branch 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    977899a View commit details
    Browse the repository at this point in the history

  32. As Nuno discovered, I was accidentally adding a new line(un-needed) 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    6c3a9e2 View commit details
    Browse the repository at this point in the history

  33. Merge branch 'siemens/rhel9/devel' of code.siemens.com:infosec-pss-go… 

    …v/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/rhel9/devel
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    d87451a View commit details
    Browse the repository at this point in the history

  34. Merge branch 'siemens/feat/document_main_variables' into siemens/rhel… 

    …9/devel
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    cc3cc03 View commit details
    Browse the repository at this point in the history

  35. Updating the testfile with documented findings 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    e1bb833 View commit details
    Browse the repository at this point in the history

  36. Merge branch 'siemens/rhel9/devel' of code.siemens.com:infosec-pss-go… 

    …v/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/rhel9/devel

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    9bd22c2 View commit details
    Browse the repository at this point in the history

Commits on Jan 31, 2024

  1. Aplying patch to be used for extending-documentation 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 31, 2024
    Configuration menu
    Copy the full SHA
    c70c236 View commit details
    Browse the repository at this point in the history

  2. Removing statement about SSH precedence vars. 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 31, 2024
    Configuration menu
    Copy the full SHA
    a83678e View commit details
    Browse the repository at this point in the history

  3. Fixing yaml-lint errors 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 31, 2024
    Configuration menu
    Copy the full SHA
    f2a2757 View commit details
    Browse the repository at this point in the history

  4. Documenting also new added(space_left & admin_space_left) 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 31, 2024
    Configuration menu
    Copy the full SHA
    3581793 View commit details
    Browse the repository at this point in the history

  5. Solving conflicts after previous commit: 

    Ensuring "session optional pam_umask.so" is present in /etc/pam.d/{system-auth | password-auth}

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 31, 2024
    Configuration menu
    Copy the full SHA
    594e52a View commit details
    Browse the repository at this point in the history

  6. Replacing secure-configuration of 'audit' and 'audit_backlog_limit' f… 

    …rom the `/etc/default/grub` approach to `grubby`(actually used by CIS)

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 31, 2024
    Configuration menu
    Copy the full SHA
    1880342 View commit details
    Browse the repository at this point in the history

  7. Fixing indentation for lines reported by yamllint 

    Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Jan 31, 2024
    Configuration menu
    Copy the full SHA
    e2738f0 View commit details
    Browse the repository at this point in the history

Commits on Feb 1, 2024

  1. [IP] New branch was created, so a new merge will be done. 

    Revert "Merge branch 'siemens/feat/document_main_variables' into siemens/rhel9/devel"

This reverts commit cc3cc03, reversing
changes made to d87451a.

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    057afdc View commit details
    Browse the repository at this point in the history

  2. Merge branch 'siemens/feat/Refactor_Document_main_variables' into 'si… 

    …emens/rhel9/devel'

Aplying patch to be used for extending-documentation

See merge request infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis!17
    @ipruteanu-sie
    ipruteanu-sie committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    9c1a473 View commit details
    Browse the repository at this point in the history

  3. Merge branch 'siemens/feat/b5_6_5_pam-d_files_session' into 'siemens/… 

    …rhel9/devel'

Solving conflicts after previous commit:

See merge request infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis!19
    @ipruteanu-sie
    ipruteanu-sie committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    ead88e8 View commit details
    Browse the repository at this point in the history

  4. Merge branch 'siemens/feat/BgrubbyUsageForParams' into 'siemens/rhel9… 

    …/devel'

Grubby: secure-configuration of 'audit' and 'audit_backlog_limit'

See merge request infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis!20
    @ipruteanu-sie
    ipruteanu-sie committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    d26d116 View commit details
    Browse the repository at this point in the history

Commits on Feb 6, 2024

  1. Rule 5.2.20 expects values different than 0, but previous form of the… 

    … task was setting CountMax to 0

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Feb 6, 2024
    Configuration menu
    Copy the full SHA
    a84cf8f View commit details
    Browse the repository at this point in the history

  2. Fixing conflict when changed value from 0>3(caused by previous lines … 

    …added by docs).
    @ipruteanu-sie
    ipruteanu-sie committed Feb 6, 2024
    Configuration menu
    Copy the full SHA
    09272d0 View commit details
    Browse the repository at this point in the history

  3. Fixing conflicts caused by docs addition <> default value changed, th… 

    …rown during Rebase

Signed-off-by: Ionut Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Feb 6, 2024
    Configuration menu
    Copy the full SHA
    42f0ce4 View commit details
    Browse the repository at this point in the history

  4. Merge branch 'siemens/feat/5_2_20_Wrong_Value_clientalivecountmax' of… 

    … code.siemens.com:infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/feat/5_2_20_Wrong_Value_clientalivecountmax
    @ipruteanu-sie
    ipruteanu-sie committed Feb 6, 2024
    Configuration menu
    Copy the full SHA
    54a7f90 View commit details
    Browse the repository at this point in the history

Commits on Feb 21, 2024

  1. Adding CIS default expectation for ClientAliveInterval 

    Signed-off-by: Pruteanu <[email protected]>
    @ipruteanu-sie
    ipruteanu-sie committed Feb 21, 2024
    Configuration menu
    Copy the full SHA
    d53e3ed View commit details
    Browse the repository at this point in the history