ansible-lockdown / RHEL9-CIS

Ansible role for Red Hat 9 CIS Baseline

https://ansible-lockdown.readthedocs.io

ansible-lockdown/RHEL9-CIS Issues

audit_log_dir not created
Updated 20 days ago1
5.5.1 and others breaks authselect
Updated 23 days ago1
How to avoid handler name clashes across roles in the same play.
Updated 23 days ago1
4.1.4.3 fails in check mode
Closed a month ago3
4.2.1.5: Typo in Rsyslog rule
Closed a month ago1
In the latest release and develop branch the final audit output is broken
Closed a month ago3
Merged Commit broke audit playbook
Closed a month ago2
pipeline failed when applid TASK 4.1.4.5 | PATCH | Ensure audit configuration files are 640 or more restrictive
Closed a month ago3
5.1.8 and 5.1.9 permissions error
Closed a month ago2
Search for SUID extends to NFS mount directories
Closed a month ago1
Extra space in regex causes gnome tools to not work
Closed a month ago2
5.6.5 rule does not treat the CIS expectation regarding `/etc/pam.d/{system-auth | password-auth}` files
Closed a month ago2
Implementation using Red Hat Satellite will never work - AAP may need to use a legacy execution environment.
Closed a month ago3
CIS Benchmark version 2.0.0
Updated a month ago1
many 5.2.X sections edit the sshd config file but do not call the restart handler for sshd
Closed 2 months ago1
cis-1.1.1.yml /bin/true -> /bin/false ?
Closed 3 months ago2
AIDE installation fails because database doesn't (yet) exist
Closed 4 months ago1
5.6.1.{1-3} rules are only partially implemented, the chage options are missing
Closed 4 months ago
Var name inconsistent between `defaults/main.yml` and actual task usage
Closed 4 months ago1
CIS FAIL: Wrong value for CountMax
Closed 4 months ago1
'authselect' does not use variable which contain many config-options, since for RH9 is not required anymore
Closed 4 months ago
a pair of tags in 5.6 are mismatching with their task
Closed 4 months ago1
Improvement(consistency-wise) for variables definition
Closed 4 months ago1
role fails when sections 4.1.4.5, 4.1.4.6 and 4.1.4.7 are set to false on the defaults main file
Closed 4 months ago2
rhel9cis_authselect['options']
Closed 4 months ago1
Wrong subsection name(rsyslog)
Closed 4 months ago1
Rsyslog redundant conditional
Closed 4 months ago1
Correct conditional for: `3.4.2.5 | AUDIT | Ensure firewalld drops unnecessary services and ports` rule
Closed 4 months ago1
2.3.4 - Ensure FTP client is not installed - wrong conditional
Closed 4 months ago1
Inconsistent conditionals when masking services
Closed 4 months ago1
Variables not used at all within role
Closed 4 months ago2
Defined var for timeout not used
Closed 4 months ago1
Variables used for audit were not defined
Closed 4 months ago1
5.5.1 through 5.5.4 do not account for authselect
Closed 4 months ago1
Redundant conditional statements in 1.6.1.x
Closed 4 months ago
Audit log files must have mode 0640 or less permissive ?
Closed 4 months ago1
Root account locked
Closed 4 months ago
5.6.1.1 Ensure password expiration is 365 days or less
Closed 4 months ago1
CIS uses `grubby` for checking rules `4.1.1.2` & `4.1.1.3`, which are thus failing
Closed 7 months ago
Idempotent and other issues in 4.1.1.2 and 4.1.1.3
Closed 7 months ago
4.2.3 | PATCH | Ensure permissions on all logfiles are configured - Not idempotent with Molecule
Closed 8 months ago2
Document variables in defaults/main.yml
Closed 8 months ago1
DEPRECATION WARNING is generating when play task `6.1.11 | AUDIT | Ensure no ungrouped files or directories exist`
Closed 8 months ago1
Using an AD account to connect to host incorrectly fails rule 5.3.4
Closed 8 months ago
Question: Incorrect condition for cis_1.3..3
Closed 8 months ago1
5.6.1.2 Ensure minimum days between password changes is configured
Closed 8 months ago3
error when scanning a server that is offline
Closed 8 months ago4
5.6.5 Ensure default user umask is 027 or more restrictive: CIS-CAT check fails.
Closed 8 months ago4
3.3.7 Ensure Reverse Path Filtering is enabled bug
Closed 9 months ago7
CIS 5.6.x -- USERGROUPS_ENAB no
Closed a year ago2