ansible-lockdown/UBUNTU22-CIS

Issues

• ansible bug: notify on a block

  #236 opened 3 months ago by ckonstanski-olo
  3

• Plans for an Ubuntu Linux 22.04, CIS 2.0.0 version?

  #234 opened 3 months ago by jvleminc
  4

• Tasks are not being skipped based on defaults/main.yml or passing '-e taskname=false'

  #229 opened 4 months ago by mboeker
  7

• Enhancing the way tasks for rules 1.1.2.2, 1.1.2.3, and 1.1.2.4 are written

  #199 opened 2 months ago by DianaMariaDDM
  1

• UBUNTU22-CIS 'audit_bin' is undefined

  #223 opened 3 months ago by txsastre
  1

• Ubuntu 24 compatibility

  #231 opened 3 months ago by patrickfong
  1

• Unexpected Deletion of Tanium Configuration Files during CIS Benchmark Application

  #186 opened 5 months ago by vivekbangare
  2

• "PRELIM | Gather UID 0 accounts other than root" runs even though ubtu22cis_rule_6_2_10 is false

  #219 opened 5 months ago by egonzalf
  1

• reboot task is not idempotent

  #204 opened 5 months ago by bhuddah
  2

• 5.4.1 | PATCH | Ensure password creation requirements are configured

  #182 opened 5 months ago by ma3s7ro
  3

• Control 1.1.10 usb_storage blacklisting requires initramfs update

  #144 opened 5 months ago by paulquevedojdrf
  4

• Please add assertion for ubtu22cis_sshd formatting

  #152 opened 5 months ago by dderemiah
  7

• Syntax issue for PRELIM task "Find all sudoers files"

  #193 opened 5 months ago by DianaMariaDDM
  3

• Not able to ssh after hardening of Ubuntu OS

  #170 opened 5 months ago by vivekbangare
  12

• Task 5.4.3 does not completely implement the settings required by CIS

  #180 opened 5 months ago by DianaMariaDDM
  2

• A value for var: *container_vars_file* is not defined in this role

  #184 opened 5 months ago by ipruteanu-sie
  2

• Syntax issue for PRELIM task "List users accounts"

  #195 opened 5 months ago by DianaMariaDDM
  1

• Inconsistency issue for task 2.2.16

  #197 opened 5 months ago by DianaMariaDDM
  1

• Small fixes in the documentation of the variables

  #201 opened 5 months ago by DianaMariaDDM
  1

• Control 3.1.1 | Disable IPv6 does not work using sysctl

  #207 opened 5 months ago by julianmaze
  1

• Error on handler rule_4_1_3_21. Not added in tags parameters.

  #216 opened 5 months ago by txsastre
  3

• ERROR! this task 'ansible.builtin.include_vars' has extra params

  #209 opened 6 months ago by bhavyaNykaa
  1

• Error 1.6.1.1 and 5.4.1 when blocked /var/lib/dpkg/lock-frontend.

  #215 opened 6 months ago by txsastre
  3

• After run this rule and now login take longer time

  #203 opened 6 months ago by TCP-88
  4

• Hard disk partitioning prerequisite

  #210 opened 6 months ago by hsh-it
  3

• IPv6 disabling doesn't respect declared mechanism

  #190 opened 7 months ago by joshavant
  0

• 3.3.x ipv6 settings should be configured either way

  #141 opened 8 months ago by zac90
  1

• ipv6.disabled=1 is appended to grub every time it's run

  #172 opened 10 months ago by Jason-Hendry
  0

• Update Release Branch

  #163 opened 10 months ago by zac90
  2

• Release latest 1.2.0 to Ansible Galaxy?

  #156 opened 10 months ago by colinbruner
  5

• All tasks under cis_3.3.x.yml (3.3.1-3.3.9) are being appled to the file defined by ubtu22cis_sysctl_network_conf but not commented from other file matches

  #154 opened 10 months ago by LoZZoL
  0

• 1.8.4 rule: extra gdm3 question

  #126 opened 10 months ago by ipruteanu-sie
  1

• 5.4.3 Not being triggered due to regexp not matching.

  #145 opened 10 months ago by zac90
  0

• Controls 5.5.1.1-3 (Password expiration) have incorrect return values defined

  #153 opened 10 months ago by LoZZoL
  0

• 3.2.2 incorrect conditional causing opposite effect

  #139 opened 10 months ago by zac90
  1

• 3.5.1.4 ipv6 settings should be configured either way

  #142 opened 10 months ago by zac90
  0

• 3.1.1 Regex will not match when ipv6.disable=(0|1) not already present in /etc/default/grub

  #151 opened 10 months ago by LoZZoL
  0

• 3.1.1 Incorrect profile tags

  #140 opened 10 months ago by zac90
  1

• System apps aren't being fully removed

  #138 opened 10 months ago by zac90
  1

• setup_audit control doesnt install git as a prerequisite

  #136 opened 10 months ago by paulquevedojdrf
  0

• "PRELIM | Register if snap being used" hangs on `more`

  #127 opened a year ago by tomi-bigpi
  0

• Step 6.2.11 fails due to bad matching of nologin in /etc/passwd

  #135 opened 10 months ago by paulquevedojdrf
  0

• 1.8.{2-3} Using `/etc/gdm3/greeter.dconf-defaults` does NOT make CIS report rules as compliant

  #124 opened 10 months ago by ipruteanu-sie
  0

• Wrong conditional, easy fix

  #121 opened 10 months ago by ipruteanu-sie
  0

• Controls 5.5.1.x, breaking a disabled root account.

  #120 opened 10 months ago by zac90
  2

• 5.2.4 Script Fails if no SSH denied_users are Passed

  #165 opened 10 months ago by r0bc94
  1

• systemd-timesyncd NTP configuration error

  #161 opened 10 months ago by Jeroen0494
  0

• 3.5.1.x UFW not disabling nftables

  #143 opened 10 months ago by zac90
  4

• 5.6.5 Ensure default user umask is 027 or more restrictive: CIS-CAT check fails.

  #157 opened a year ago by brisky
  1

• 3.3.7 Ensure Reverse Path Filtering is enabled

  #158 opened a year ago by brisky
  1