Rhel9#101

Open

sglusnevs wants to merge 42 commits intofervidus:mainfrom

sglusnevs:rhel9

Commits on Jun 29, 2023

Commits on Jul 14, 2023

Added rule 'Ensure audit tools are 755 or more restrictive'
Sergejs Glusnevs
committed
Rule added 'Ensure SSH X11 forwarding is disabled'
Sergejs Glusnevs
committed
Rules added 'Ensure SSH MaxAuthTries is set to 4 or less' and 'Ensure SSH MaxSessions is set to 10 or less'
Sergejs Glusnevs
committed
Added 'Ensure audit configuration files are 640 or more restrictive'
Sergejs Glusnevs
committed

Commits on Jul 16, 2023

Added Rule 'Ensure users must provide password for escalation'
Sergejs Glusnevs
committed
Fixed rule: 'Ensure re-authentication for privilege escalation is not disabled globally'
Sergejs Glusnevs
committed
Added Hiera for RedHat 9 and Rocky 9
sglusnevs
committed

Commits on Jul 23, 2023

Rule 'Ensure sudo authentication timeout is configured correctly' implemented
Sergejs Glusnevs
committed
Added Rule 'Ensure password hashing algorithm is SHA-512 or yescrypt'
Sergejs Glusnevs
committed

Commits on Jul 24, 2023

Added Rule 'Ensure local interactive user home directories are mode 750 or more restrictive'
Sergejs Glusnevs
committed
Typo fix
Sergejs Glusnevs
committed
Rule added: 'Ensure root is the only UID 0 account'
Sergejs Glusnevs
committed
Rule added: 'Ensure root password is set'
Sergejs Glusnevs
committed
Added rule: 'Ensure a single firewall configuration utility is in use'
Sergejs Glusnevs
committed
Added rule: 'Ensure host based firewall loopback traffic is configured'
Sergejs Glusnevs
committed
File rights fixed
Sergejs Glusnevs
committed
Rule ensure_host_based_firewall_loopback_traffic_is_configured added
Sergejs Glusnevs
committed
Rule Added: 'Ensure at least one nftables table exists'
Sergejs Glusnevs
committed
Update for RHEL9
Sergejs Glusnevs
committed
Bugfix for issue #96 'crypto_policy_sshd.rb unexpected return'
Sergejs Glusnevs
committed

Commits on Jul 25, 2023

Rule Added: 'Ensure default user shell timeout is 900 seconds or less'
Sergejs Glusnevs
committed
Bugfix in profile files
Sergejs Glusnevs
committed
Rule Added: 'Ensure default user umask is 027 or more restrictive'
Sergejs Glusnevs
committed
Typo fix
Sergejs Glusnevs
committed

Commits on Aug 15, 2023

Hardening schedule removed
Sergejs Glusnevs
committed
Escaping fixed
Sergejs Glusnevs
committed
Fix to suppress error message on absent AIDE tools
Sergejs Glusnevs
committed
Rule added: Ensure accounts in /etc/passwd use shadowed passwords (Automated)
Sergejs Glusnevs
committed
Rule Added: 'Ensure authselect includes with-faillock'
Sergejs Glusnevs
committed

Commits on Sep 21, 2023

Creation of recursive directories enabled
Sergejs Glusnevs
committed
some legacy benchmarks removed
Sergejs Glusnevs
committed
Workaround for exec errors
Sergejs Glusnevs
committed
RHEL/Rocky 9 added to readme
Sergejs Glusnevs
committed