ansible-lockdown/RHEL8-STIG

Issues

• rhel8stig_boot_part incorrect

  #298 opened 3 months ago by mikefrompsu
  1

• Tasks contain duplicated and templated tags

  #296 opened 3 months ago by qwestduck
  0

• Several references exist to the removed openscap scanning feature

  #294 opened 3 months ago by qwestduck
  0

• RHEL-08-040126 - Grep command fails matching due to '-w' switch

  #289 opened 5 months ago by derekbentson
  0

• Allow exceptions for RHEL-08-010380 enforcement

  #278 opened 6 months ago by prestonSeaman2
  1

• Handler should verify STIG rule to enable service before blinding restarting service - e.g., RHEL-08-040136: true = fapolicyd restarted

  #277 opened 7 months ago by BJSmithIEEE
  1

• Current criteria to identify local interactive users is based solely on uid range in /etc/login.defs

  #251 opened 5 months ago by prestonSeaman2
  1

• RHEL-08-040090 approach breaks existing firewalls (but fix is a simple file copy + 2 simple regexes)

  #267 opened 5 months ago by BJSmithIEEE
  2

• RHEL-08-040110 wireless network adapter disable task has bad tag

  #254 opened 5 months ago by platymatt
  3

• RHEL-08-010161 ansible.builtin.find module edge case bug

  #242 opened 5 months ago by prestonSeaman2
  2

• RHEL-08-010740 PATCH Task fails if home directory is set to /dev/null

  #284 opened 6 months ago by SeanathanVT
  3

• Misconfigured Setting - RHEL-08-040279 - RHEL 8 must ignore IPv4 Internet Control Message Protocol (ICMP) redirect messages.

  #263 opened 7 months ago by platymatt
  2

• RHEL-08-020022 Control should only apply to versions below 8.2

  #271 opened 7 months ago by prestonSeaman2
  1

• RHEL-08-010161 Define new variable based on the fact ansible_mounts

  #270 opened 7 months ago by prestonSeaman2
  0

• V-244546 Mismatched default vs stig

  #265 opened 7 months ago by fallenpixel
  0

• fix-cat2.yml RHEL-08-020041 for tmux shell

  #232 opened a year ago by eday87
  2

• Update the playbook to support the new and updated requirements in V1R12

  #246 opened 8 months ago by aaronlippold
  5

• Modprobe configurations need to be updated with: Stig Version 1, Release: 13 Benchmark Date: 24 Jan 2024

  #249 opened 8 months ago by jmalpede
  2

• RHEL-08-010070 Task Causes Duplicate Logs

  #248 opened 8 months ago by JacobBuskirk
  1

• User session lock check and hardening bug

  #245 opened 8 months ago by prestonSeaman2
  1

• ERROR! 'notify' is not a valid attribute for a Block

  #226 opened 8 months ago by jmalpede
  5

• fix-cat2.yml re-writes /etc/fstab line for /boot/efi with a device path instead of VFAT Serial Number (psuedo-UUID) replace

  #222 opened 8 months ago by BJSmithIEEE
  2

• Give ability to set our own root_unlock_time

  #212 opened 8 months ago by prestonSeaman2
  3

• RHEL-08-020050 fails if loop list receives a single value

  #261 opened 8 months ago by SeanathanVT
  2

• Make grub config handler fails on legacy BIOS hosts with /boot on LVM

  #257 opened 8 months ago by platymatt
  4

• RHEL_08_040321 does not consider rhel8stig_gui variable, and, sets system to use multi-user.target even when a gui is used.

  #243 opened 9 months ago by whitehat237
  2

• RHEL-08-020030 failure if control in place already

  #241 opened 9 months ago by BillSkiCO
  0

• Oracle Linux Distribution not identified correctly

  #239 opened 9 months ago by BillSkiCO
  0

• Sysctl Template Overwrites symlink to /etc/sysctl.conf

  #229 opened 10 months ago by JacobBuskirk
  0

• RHEL-08-010295 omits '+VERS-ALL' from gnutls crypto policy

  #233 opened a year ago by qwestduck
  0

• Role not working when used with Satellite server.

  #213 opened a year ago by davidasexton
  6

• Constrain RHEL-08-020352 to local interactive user accounts

  #211 opened a year ago by prestonSeaman2
  2

• Enumerating over non-local mounts

  #210 opened a year ago by prestonSeaman2
  2

• KexAlgorithms don't get replaced if abscent and files are corrupted

  #209 opened a year ago by prestonSeaman2
  2

• Check for and exclude users with /sbin/nologin needs to added for certain tasks before they run

  #208 opened a year ago by prestonSeaman2
  2

• FIPs mode not enabled before applying crypto changes.

  #207 opened a year ago by prestonSeaman2
  2

• Ansible job started to fail approx. 2 weeks ago --STIG8

  #190 opened a year ago by aismahmood
  7

• sudo password check improvements

  #216 opened a year ago by uk-bolly
  0

• crypto-policies-scripts not added to system

  #204 opened a year ago by uk-bolly
  0

• MEDIUM | RHEL-08-010295 - Lineinfile correction

  #196 opened 2 years ago by jmalpede
  1

• Warn Parameter Deprecated in Ansible 2.14

  #194 opened 2 years ago by JacobBuskirk
  2

• pam.d typo for unlock_time

  #163 opened 2 years ago by JacobBuskirk
  1

• SSHD Permissions

  #164 opened 2 years ago by JacobBuskirk
  1

• trigger update sysctl task doesn't do anything

  #165 opened 2 years ago by JacobBuskirk
  1

• RHEL-08-010295 changes permissions on a symlink

  #166 opened 2 years ago by JacobBuskirk
  1

• RHEL-08-040001 doesn't uninstall abrt* packages

  #173 opened 2 years ago by JacobBuskirk
  2

• RHEL-08-010291 Has Incorrect Regex

  #174 opened 2 years ago by JacobBuskirk
  1

• Auditd.conf Changes Permissions Multiple Times

  #175 opened 2 years ago by JacobBuskirk
  1

• RHEL-08-020010 and RHEL-08-020025 Spacing Issue

  #177 opened 2 years ago by JacobBuskirk
  3

• Prelim Task Isn't Idempotent

  #176 opened 2 years ago by JacobBuskirk
  0