ansible-lockdown/UBUNTU22-CIS

Issues

• Would a PR for refactoring tasks that treat several rules be welcome for branch benchmark_v2.0.0?

  #262 opened 17 days ago by bgro
  4

• CIS 1.7.x missing '.stdout' field on variable in branch benchmark_v2.0.0

  #261 opened 22 days ago by kbknapp
  1

• Task 1.7.2 in branch benchmark_v2.0.0 has incorrect indentation

  #260 opened 22 days ago by kbknapp
  1

• Task references undefined variable in benchmark_v2.0.0 branch

  #259 opened 22 days ago by kbknapp
  1

• Wrong variable references in task for 5.1.4 (branch benchmark_v2.0.0)

  #257 opened 24 days ago by bgro
  2

• Inconsistencies regarding rule ids in when and tag fields (branch benchmark_v2.0.0)

  #258 opened 24 days ago by bgro
  2

• Task titles do not quite match CIS rule texts for v2.0.0

  #256 opened a month ago by bgro
  2

• Ubuntu 24 compatibility

  #231 opened 7 months ago by patrickfong
  6

• ansible bug: notify on a block

  #236 opened 6 months ago by ckonstanski-olo
  7

• playbook fails on fresh VM with missing /etc/passwd-

  #248 opened a month ago by dlesaffrew
  2

• Prelim task "Ensure auditd is installed" required for level 1 benchmarks is not executed if using only level1-server tag

  #247 opened a month ago by angaaruriakhil
  2

• [Enhancement] Ensure Netplan permissions

  #245 opened 3 months ago by pandalec
  2

• Tasks are not being skipped based on defaults/main.yml or passing '-e taskname=false'

  #229 opened a month ago by mboeker
  8

• Plans for an Ubuntu Linux 22.04, CIS 2.0.0 version?

  #234 opened 6 months ago by jvleminc
  6

• Enhancing the way tasks for rules 1.1.2.2, 1.1.2.3, and 1.1.2.4 are written

  #199 opened 6 months ago by DianaMariaDDM
  1

• UBUNTU22-CIS 'audit_bin' is undefined

  #223 opened 6 months ago by txsastre
  1

• Unexpected Deletion of Tanium Configuration Files during CIS Benchmark Application

  #186 opened 8 months ago by vivekbangare
  2

• "PRELIM | Gather UID 0 accounts other than root" runs even though ubtu22cis_rule_6_2_10 is false

  #219 opened 8 months ago by egonzalf
  1

• reboot task is not idempotent

  #204 opened 9 months ago by bhuddah
  2

• 5.4.1 | PATCH | Ensure password creation requirements are configured

  #182 opened 9 months ago by ma3s7ro
  3

• Control 1.1.10 usb_storage blacklisting requires initramfs update

  #144 opened 9 months ago by paulquevedojdrf
  4

• Please add assertion for ubtu22cis_sshd formatting

  #152 opened 9 months ago by dderemiah
  7

• Syntax issue for PRELIM task "Find all sudoers files"

  #193 opened 9 months ago by DianaMariaDDM
  3

• Not able to ssh after hardening of Ubuntu OS

  #170 opened 9 months ago by vivekbangare
  12

• Task 5.4.3 does not completely implement the settings required by CIS

  #180 opened 9 months ago by DianaMariaDDM
  2

• A value for var: *container_vars_file* is not defined in this role

  #184 opened 9 months ago by ipruteanu-sie
  2

• Syntax issue for PRELIM task "List users accounts"

  #195 opened 9 months ago by DianaMariaDDM
  1

• Inconsistency issue for task 2.2.16

  #197 opened 9 months ago by DianaMariaDDM
  1

• Small fixes in the documentation of the variables

  #201 opened 9 months ago by DianaMariaDDM
  1

• Control 3.1.1 | Disable IPv6 does not work using sysctl

  #207 opened 9 months ago by julianmaze
  1

• Error on handler rule_4_1_3_21. Not added in tags parameters.

  #216 opened 9 months ago by txsastre
  3

• ERROR! this task 'ansible.builtin.include_vars' has extra params

  #209 opened 9 months ago by bhavyaNykaa
  1

• Error 1.6.1.1 and 5.4.1 when blocked /var/lib/dpkg/lock-frontend.

  #215 opened 9 months ago by txsastre
  3

• After run this rule and now login take longer time

  #203 opened 9 months ago by TCP-88
  4

• Hard disk partitioning prerequisite

  #210 opened 10 months ago by hsh-it
  3

• IPv6 disabling doesn't respect declared mechanism

  #190 opened a year ago by joshavant
  0

• 3.3.x ipv6 settings should be configured either way

  #141 opened a year ago by zac90
  1

• ipv6.disabled=1 is appended to grub every time it's run

  #172 opened a year ago by Jason-Hendry
  0

• Update Release Branch

  #163 opened a year ago by zac90
  2

• Release latest 1.2.0 to Ansible Galaxy?

  #156 opened a year ago by colinbruner
  5

• All tasks under cis_3.3.x.yml (3.3.1-3.3.9) are being appled to the file defined by ubtu22cis_sysctl_network_conf but not commented from other file matches

  #154 opened a year ago by LoZZoL
  0

• 5.4.3 Not being triggered due to regexp not matching.

  #145 opened a year ago by zac90
  0

• Controls 5.5.1.1-3 (Password expiration) have incorrect return values defined

  #153 opened a year ago by LoZZoL
  0

• 3.5.1.4 ipv6 settings should be configured either way

  #142 opened a year ago by zac90
  0

• 3.1.1 Regex will not match when ipv6.disable=(0|1) not already present in /etc/default/grub

  #151 opened a year ago by LoZZoL
  0

• 5.2.4 Script Fails if no SSH denied_users are Passed

  #165 opened a year ago by r0bc94
  1

• systemd-timesyncd NTP configuration error

  #161 opened a year ago by Jeroen0494
  0

• 3.5.1.x UFW not disabling nftables

  #143 opened a year ago by zac90
  4

• 5.6.5 Ensure default user umask is 027 or more restrictive: CIS-CAT check fails.

  #157 opened a year ago by brisky
  1

• 3.3.7 Ensure Reverse Path Filtering is enabled

  #158 opened a year ago by brisky
  1