You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In branch benchmark_v2.0.0
the task titles do not 100% match the rule texts of the CIS Benchmark v2.0
Here is an overview over all differences: the - difference is the text of the CIS Benchmark,
the + difference is what is currently found in the Ansible role.
- id: R1.5.1diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure address space layout randomization is enabled - +Ensure address space layout randomization (ASLR) is enabled ```
- id: R1.6.4diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure access to /etc/motd is configured - +Ensure permissions on /etc/motd are configured ```
- id: R1.6.5diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure access to /etc/issue is configured - +Ensure permissions on /etc/issue are configured ```
- id: R1.6.6diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure access to /etc/issue.net is configured - +Ensure permissions on /etc/issue.net are configured ```
- id: R1.7.1diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure GDM is removed - +Ensure GNOME Display Manager is removed ```
- id: R1.7.3diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure GDM disable-user-list option is enabled - +Ensure disable-user-list option is enabled ```
- id: R2.1.5diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure dnsmasq services are not in use - +Ensure dnsmasq server services are not in use ```
- id: R2.1.21diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure mail transfer agent is configured for local-only mode - +Ensure mail transfer agents are configured for local-only mode ```
- id: R2.2.6diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure ftp client is not installed - +Ensure ftp is not installed ```
- id: R2.3.3.2diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure chrony is running as user \_chrony - +Ensure chrony is running as user _chrony ```
- id: R2.4.1.1diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure cron daemon is enabled and active - +Ensure cron daemon is enabled and running ```
- id: R2.4.1.8diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure crontab is restricted to authorized users - +Ensure cron is restricted to authorized users ```
- id: R4.1.4diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure ufw loopback traffic is configured - +Ensure loopback traffic is configured ```
- id: R5.1.6diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd Ciphers are configured - +Ensure only strong Ciphers are used ```
- id: R5.1.9diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd GSSAPIAuthentication is disabled - +Ensure sshd GSSAPIAuthentication is is disabled ```
- id: R5.1.10diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd HostbasedAuthentication is disabled - +Ensure SSH HostbasedAuthentication is disabled ```
- id: R5.1.11diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd IgnoreRhosts is enabled - +Ensure SSH IgnoreRhosts is enabled ```
- id: R5.1.12diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd KexAlgorithms is configured - +Ensure only strong Key Exchange algorithms are used ```
- id: R5.1.13diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd LoginGraceTime is configured - +Ensure SSH LoginGraceTime is configured ```
- id: R5.1.14diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd LogLevel is configured - +Ensure SSH LogLevel is configured ```
- id: R5.1.15diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd MACs are configured - +Ensure only strong MAC algorithms are used ```
- id: R5.1.16diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd MaxAuthTries is configured - +Ensure SSH MaxAuthTries is set to 4 or less ```
- id: R5.1.18diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd MaxStartups is configured - +Ensure SSH MaxStartups is configured ```
- id: R5.1.19diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd PermitEmptyPasswords is disabled - +Ensure SSH PermitEmptyPasswords is disabled ```
- id: R5.1.21diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure sshd PermitUserEnvironment is disabled - +Ensure SSH PermitUserEnvironment is disabled ```
- id: R5.2.4diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure users must provide password for privilege escalation - +Ensure users must provide password for escalation ```
- id: R5.3.3.2.5diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure password maximum sequential characters is configured - +Ensure password maximum sequential characters is is configured ```
- id: R6.1.3
- id: R6.2.1.2.3diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure systemd-journal-upload is enabled and active - +Ensure systemd-journal-remote is enabled and active ```
- id: R6.3.3.6diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure use of privileged commands are collected - +Ensure use of privileged commands is collected ```
- id: R6.3.3.7diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure unsuccessful file access attempts are collected - +Ensure unsuccessful unauthorized file access attempts are collected ```
- id: R6.3.3.19diff: |- **root['rule']**: ``` diff --- +++ @@ -1,3 +1 @@ - -Ensure kernel module loading unloading and modification is collected - +Ensure kernel module loading and unloading is collected ```
Expected Behavior
Ideally, the task titles should exactly match the CIS rule content (as is already the case for 95% of all rules/tasks)
Actual Behavior
n/a
Control(s) Affected
n/a Environment (please complete the following information):
Describe the Issue
In branch benchmark_v2.0.0
the task titles do not 100% match the rule texts of the CIS Benchmark v2.0
Here is an overview over all differences: the
-
difference is the text of the CIS Benchmark,the
+
difference is what is currently found in the Ansible role.Expected Behavior
Ideally, the task titles should exactly match the CIS rule content (as is already the case for 95% of all rules/tasks)
Actual Behavior
n/a
Control(s) Affected
n/a
Environment (please complete the following information):
Additional Notes
Anything additional goes here
Possible Solution
Enter a suggested fix here
The text was updated successfully, but these errors were encountered: