ovh/debian-cis

Issues

• Newb Question for CIS Level

  #246 opened 14 days ago by abitrusty55
  1

• 1.1.21_sticky_bit_world_writable_folder: Check failed

  #248 opened 14 days ago by mohaa7
  2

• Disable all file systems not actively used

  #241 opened 14 days ago by wilsonmar
  1

• [ bug ] Add Docker support: "Your distribution has been identified as which is not debian"

  #247 opened 2 months ago by yonas
  1

• 1.1.23_disable_usb_storage

  #249 opened a month ago by joachimvenaas
  1

• Possible to use for Proxmox-Hosts?

  #240 opened 19 days ago by JSuenram
  4

• Root

  #244 opened 19 days ago by firman487
  0

• Newb install issue

  #245 opened 2 months ago by abitrusty55
  1

• 5.4.5_default_timeout.sh missing HARDENING_LEVEL

  #239 opened 9 months ago by CookieCr2nk
  0

• What CIS Benchmark is used exactly ? What do I implement ?

  #235 opened 9 months ago by ManuGithubSteam
  1

• How to use debian-cis? [explained for non expert Linux admins]

  #231 opened 9 months ago by bluepuma77
  5

• Ignoring path requires 3 different variables

  #233 opened a year ago by sblaisot
  1

• hardening.sh --set-hardening-level does not work

  #230 opened a year ago by highwayfixerman
  1

• Unable to deploy this script on Ubuntu 22.o LTS

  #211 opened a year ago by Vincentssssssss
  5

• [5.2.18] Script breaks due to space separation in ALLOWED_USERS

  #227 opened a year ago by lgaida
  0

• wrong check of REMOTE_HOST in 4.2.1.6_remote_syslog-ng_acl.sh

  #124 opened a year ago by sblaisot
  0

• Use multiple scripts with only option

  #224 opened a year ago by foolished129
  1

• Update README.md to Represent Actual Hardening Abilities

  #219 opened a year ago by jessejcollins
  1

• can follow the guide, can't read etc/default/cis-hardening: No such file or directory

  #217 opened a year ago by Ondjultomte
  1

• Fix Quickstart, missing character

  #220 opened a year ago by bluepuma77
  1

• Seeking approval for relicensing of software

  #218 opened a year ago by JeremiahSecrist
  1

• Password hashes in /etc/shadow not SHA512

  #209 opened a year ago by ITNerdbox
  1

• Deprecated check 99.5.2.8_ssh_sys_sandbox

  #212 opened a year ago by agrimal
  1

• Debian 11 goes into tty mode(commmand line mode) after apply level 3 hardening

  #183 opened 2 years ago by Malikjawad05
  2

• nftables is not checked.

  #191 opened a year ago by JugeHuge
  1

• Script 2.2.1.1_use_time_sync not checking for systemd-timesyncd

  #189 opened a year ago by thejandg
  2

• ntp service is checked even chrony is installed and configured

  #192 opened a year ago by JugeHuge
  7

• CIS Benchmark numbering doesn't match CIS official docs

  #201 opened a year ago by moshe
  1

• Is this script compatible with Debian 12 ?

  #200 opened a year ago by AkechiShiro
  2

• 5.2.15 script not looking for match defined in the CIS_Debian_Linux_10_Benchmark_v1.0.0.pdf

  #196 opened a year ago by LoupaLoupa
  3

• Does the about section need to be updated?

  #182 opened a year ago by brizzolazzi
  3

• Debain 11 Crashed when enable selinux enforcing mode

  #195 opened a year ago by Malikjawad05
  1

• Use a uniformized way to manage EXCEPTIONS

  #105 opened 2 years ago by thibaultserti
  1

• Audit logging rules not persistent

  #165 opened 2 years ago by fiasomj
  0

• flawed functions easily fixed: is_a_partition and has_mount_option

  #155 opened 2 years ago by xuancong84
  0

• 5.4.5 Does Not Append Correctly Nor to Correct Files

  #116 opened 2 years ago by keithwoelke
  1

• unknown compression for member 'control.tar.zst', giving up

  #175 opened 2 years ago by santosadrian
  0

• Adapt 5.3.4 (password hashing algorithm) to Debian11

  #158 opened 2 years ago by toutoen
  0

• 99.1.3_acc_sudoers_no_all.sh: timeout with large sudoers.d/

  #167 opened 2 years ago by speed47
  0

• Double users_valid_homedir.sh

  #163 opened 2 years ago by wilfriedroset
  1

• Debian 11 support ?

  #162 opened 2 years ago by inf0rmix
  1

• Debian 11

  #138 opened 3 years ago by bert2002
  3

• chrony and ntp checks should skip if package is not installed

  #117 opened 3 years ago by sblaisot
  3

• LOGLEVEL config option takes precedence over `--set-log-level' parameter

  #126 opened 3 years ago by sblaisot
  0

• SSH protocol 2 check is obsolete

  #113 opened 3 years ago by melak
  5

• Show only failed scripts

  #114 opened 3 years ago by oscartbeaumont
  1

• acc_shadow_sha512 does not recognise SHA512 password with options

  #109 opened 3 years ago by melak
  0

• acc_logindefs_sha512 does not need to reload ssh

  #110 opened 3 years ago by melak
  0

• 5.4.5_default_timeout miss TMOUT detection

  #107 opened 3 years ago by sblaisot
  0

• question: isn't UsePrivilegeSeparation deprecated?

  #106 opened 4 years ago by fintzd
  2