From d79febd10d51877d1d67cdf93285b4c6e2b16be9 Mon Sep 17 00:00:00 2001 From: Douglas MacDuff Date: Thu, 19 Nov 2020 08:07:11 -0800 Subject: [PATCH 1/2] Resolves Issue #55: Update README to correct reference benchmark. Reference benchmark: CIS Red Hat Enterprise Linux 8 Benchmark v1.0.0 - 2019-09-30 Signed-off-by: Douglas MacDuff --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index cec14bda..0ba6bcba 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ Configure RHEL/Centos 8 machine to be [CIS](https://www.cisecurity.org/cis-bench This role **will make changes to the system** that could break things. This is not an auditing tool but rather a remediation tool to be used after an audit has been conducted. -Based on [CIS RedHat Enterprise Linux 8 Benchmark v2.1.1 - 01-31-2017 ](https://community.cisecurity.org/collab/public/index.php). +Based on [CIS Red Hat Enterprise Linux 8 Benchmark v1.0.0 - 2019-09-30](https://community.cisecurity.org/collab/public/index.php). Requirements From 55db8ad61fbc10141202ab1d24690e7de35e76a5 Mon Sep 17 00:00:00 2001 From: Douglas MacDuff Date: Tue, 8 Dec 2020 10:23:51 -0800 Subject: [PATCH 2/2] Remove unused 6.2.8 code in prelim tasks Resolved issue 73 Signed-off-by: Douglas MacDuff --- tasks/prelim.yml | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/tasks/prelim.yml b/tasks/prelim.yml index 3e4f4efd..0bbec7a6 100644 --- a/tasks/prelim.yml +++ b/tasks/prelim.yml @@ -269,19 +269,3 @@ check_mode: no tags: - skip_ansible_lint -## NOTE: You will need to adjust the UID range in parenthases below. -## ALSO NOTE: We weed out any user with a home dir not in standard locations because interactive users shouldn't have those paths as a home dir. Add or removed directory paths as needed below. -- name: "PRELIM | 6.2.8 | Gather local interactive user directories" - shell: "getent passwd { {{ rhel8cis_int_gid }}..65535} | cut -d: -f6 | sort -u | grep -v '/var/' | grep -v '/nonexistent/*' | grep -v '/run/*'" - register: rhel_08_6_2_8_getent - changed_when: rhel_08_6_2_8_getent.stdout_lines is defined - failed_when: false - tags: - - rule_6.2.8 - -- name: "PRELIM | 6.2.8 | Set fact for home directory paths for interactive users" - set_fact: - rhel_08_cis_interactive_homedir_results: "{{ rhel_08_6_2_8_getent.stdout_lines }}" - when: rhel_08_6_2_8_getent.stdout_lines is defined - tags: - - rule_6.2.8