Skip to content

Releases: ansible-lockdown/RHEL7-CIS

CIS v4.0.0 - 13-08-2024

13 Aug 12:03
a095889
Compare
Choose a tag to compare

CIS RedHat Enterprise Linux 7 Benchmark v4.0.0 - 21-12-2023

Remediate

  • workflows updated and migrated to new method
  • precommit updates
  • rebase between releases

Audit

  • audit updates
    • new audit binary version
    • updated tests and tasks

What's Changed

Full Changelog: 2.0.0...2.1.0

CIS v4.0.0 - 21-12-2023

26 Jun 08:37
29af589
Compare
Choose a tag to compare

CIS RedHat Enterprise Linux 7 Benchmark v4.0.0 - 21-12-2023

Remediate

  • Many changes for new version
    • reordering of rules
    • new rules added and updated
  • workflows updated and migrated to new method
  • precommit updates
  • rebase between releases

Audit

  • audit updates
    • new audit binary version
    • updated tests and tasks

What's Changed

New Contributors

Full Changelog: 1.3.0...2.0.0

Final release CIS V3.1.1

19 Mar 09:11
599b6a0
Compare
Choose a tag to compare

Remediate

Issues closed and PRs merged - What's changed
Pre-commit updates
Update to allow Galaxy Releases for new galaxy_ng

Audit

update to later audit binary version
ability to run audit in standalone with audit_only: true

What's Changed

New Contributors

Full Changelog: 1.2.3...1.3.0

Updates and logic improvements

13 Sep 13:15
ebcb285
Compare
Choose a tag to compare

New workflow adopted
New readme layout

What's Changed

Full Changelog: 1.2.2...1.2.3

1.2.2 Overall improvements

20 Mar 09:30
76c6757
Compare
Choose a tag to compare

Summary

  • linting
  • workflows
  • audit branch alignments

What's Changed

New Contributors

Full Changelog: 1.2.1...1.2.2

Issue Fixes

14 Jan 19:48
f64f799
Compare
Choose a tag to compare

CIS Benchmark Version: 3.1.1
CIS Benchmark Release Date: May 21, 2021

Issue Fixes:

  • #259 - Undefined Variables

Enhancements:

  • PR #269
  • PR #271
  • PR #273
  • Updated logic on 5.3.18
  • Removed group in 4.2.3 since it is not required in the benchmark
  • Linting updates
  • Remove no longer needed libraries

Benchmark 3.1.1 and Issue Fixes

15 Sep 15:27
219b416
Compare
Choose a tag to compare
  • CIS Version: 3.1.1

Issue Fixes:

  • PR #247 - Fix STIG to CIS copy paste failures
  • PR #248 - Allow toggling OS check
  • PR #250 - 5.3.2 only implemented partially

Enhancements:

  • CIS Version 3.1.1 compliance
  • Additional lint updates
  • Added Issue Templates
  • Added PR Template

Final Benchmark 3.0.1 Release

12 Jul 15:15
ed38bf4
Compare
Choose a tag to compare
  • CIS Version: 3.0.1

Issue Fixes:

  • #199 - Molecule has wrong file name
  • #202 - Task for 4.1.1.3 is not fully idempotent
  • #203 - Tags are not available in galaxy
  • #204 - Task for CIS 6.1.12 seems broken
  • #205 - cis_5.2.x.yml - 5.2.15 - Fatal error
  • #208 - rhel7cis_legacy_boot variable not accepting boolean
  • #209 - UEFI grub file incorrect location
  • #213 - Undefined variable rule 5.5
  • #215 - Support for CentOS rule 1.2.1 and 1.2.2
  • #217 - 4.1.2.4 not idempotent if GRUB_CMDLINE_LINUX_DEFAULT is present
  • #222 - Idempotent 5.4.1.4
  • #225 - rule 6.2.4 with login banners
  • #226 - Inconsistent tag on rule 6.2.5
  • #240 - rule 6.1.9 /etc/gshadow- mode should be 0000
  • #241 - rule 5.6
  • #243 - Bug: typo in 6.2.5 task
  • #245 - Incorrect configuration value in Rule 3.1.1

Enhancements:

  • Linting for galaxy

Minor Updates

16 Nov 13:21
a04287c
Compare
Choose a tag to compare
  • CIS Version: 3.0.1
  • Renamed goss module
  • Updated SELinux rules idempotence

Minor Updates

16 Nov 13:23
6624ce4
Compare
Choose a tag to compare
  • CIS Version: 3.0.1
  • Added audit output file permissions
  • Fixed typos