-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* 257777 Signed-off-by: wdower <will@dower.dev> * adding 257779, adding inspec.yml from rhel8 to get started Signed-off-by: wdower <will@dower.dev> * adding in RHEL8 content to those RHEL9 controls where it applies (delta not run yet) Signed-off-by: wdower <will@dower.dev> * running delta to update RHEL8 controls with RHEL9 metadata Signed-off-by: wdower <will@dower.dev> * fixing the hardened controls Signed-off-by: wdower <will@dower.dev> * linitng Signed-off-by: wdower <will@dower.dev> * adding local config files to gitignore Signed-off-by: wdower <will@dower.dev> * adding -y to disa kitchenfile Signed-off-by: wdower <will@dower.dev> * adding local cinc-auditor install for convenience in testing Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * SV-257783 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * filling in tests up through 257789 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * adding status tracker Signed-off-by: wdower <will@dower.dev> * gitignore update Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * up through 257850 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * up through 257896 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * typo -- descibe --> describe Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * refactoring the mode checks to all use one big hash input for ease of use (can add keys to the hash for other file mode checks later Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * crontab ownership checks Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * up through 25977 -- fixed up the kernel ipv4 and ipv6 controls to ONLY have the 'is_router' caveat if that caveat is explicitly described in the check text Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * up through 257991 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * up through 258032 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * up through 258094 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * lint Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * pinning parser version until next release Signed-off-by: Aaron Lippold <lippold@gmail.com> * uop through 258236 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * up through 258242 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * missed one of the audit ones Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * fixing typo in inspec.yml, adding escape clause to 257777 to catch releases with no defined support window Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * removing branch triggers for pipeline since it keeps leading to duplicate runs -- the full pipeline should only be running for an actual PR Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * typo in 257853 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * fixing 258173 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * removing bogus check from 258239 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * only running the value test in 257789 if the value is known to not be nil Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * only testing value in 258068 if it exists. also, linting Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * reorganizing DISA role Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * adding correct Heimdall upload key name Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * tweaking threshold to match expected hardening level, turning off controls in the disaansible that wereforcing reboot Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * v1r2 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * cleanup -- re-added push pipeline triggers, removed 'WIP' from README, bumped upload-artifact version, removed unneeded pipeline step Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * removing errant references to rhel8 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * fixing grubby controls to use the right check command Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * updating 257800 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * fixing wrong input in 257803 and rhel8 version check in 257782 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * removing unneeded input from inspec.yml and fixing wrong control code in 257937 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * fixing filenames with commit hashes in the actions workflows to avoid name conflicts Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * making all controls that handle kernel settings consistent in approach, adding some caveat inputs for network settings that need to be enabled Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * removing outdated version checks from rhel8 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * Update controls/SV-257843.rb Co-authored-by: Amndeep Singh Mann <me@asm.works> * linting 257843 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * more cleanup Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * Update inspec.yml Co-authored-by: Amndeep Singh Mann <me@asm.works> * more cleanup Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * typo'd vars in 257869 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * removing short sha from the filename everywhere except the push to Heimdall for an easier time hooking it up with kitchen Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * typo'd '}' in disa workflow Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * adding caveat to catch case where NetworkManager not installed for 257949 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * fixing service param checks in 257818 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * fixing missing var in 257869 Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> * fixing ubi9 pipeline to use the actual ubi9 threshold files Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> --------- Signed-off-by: wdower <will@dower.dev> Signed-off-by: wdower <57142072+wdower@users.noreply.github.com> Signed-off-by: Aaron Lippold <lippold@gmail.com> Co-authored-by: Aaron Lippold <lippold@gmail.com> Co-authored-by: Amndeep Singh Mann <me@asm.works>
- Loading branch information
1 parent
00c4253
commit b3e65d8
Showing
487 changed files
with
31,988 additions
and
9,014 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.