Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Debian 11 CIS CI Compliance #54

Open
wants to merge 33 commits into
base: master
Choose a base branch
from
Open

Debian 11 CIS CI Compliance #54

wants to merge 33 commits into from

Commits on May 23, 2023

  1. Initial Commit with base.

    Girish Mahabir committed May 23, 2023
    Configuration menu
    Copy the full SHA
    ead90b8 View commit details
    Browse the repository at this point in the history

Commits on May 24, 2023

  1. Added 99-finalize.rules for audit, sudoers use_pty, su group creation… 

    … and journalctl storage and compression set.
    Girish Mahabir committed May 24, 2023
    Configuration menu
    Copy the full SHA
    925bde5 View commit details
    Browse the repository at this point in the history

Commits on May 30, 2023

  1. Re-arranged folders and adapted JShielder script.

    Girish Mahabir committed May 30, 2023
    Configuration menu
    Copy the full SHA
    910d35b View commit details
    Browse the repository at this point in the history

Commits on Jun 5, 2023

  1. Updated Iptables script, Updated how the port is updated in the scrip… 

    …t and fixed common-account-CIS bug.
    Girish Mahabir committed Jun 5, 2023
    Configuration menu
    Copy the full SHA
    4af16e8 View commit details
    Browse the repository at this point in the history

  2. Removed Reboot section.

    Girish Mahabir committed Jun 5, 2023
    Configuration menu
    Copy the full SHA
    6ffffd1 View commit details
    Browse the repository at this point in the history

  3. Optimized sed for ssh port.

    Girish Mahabir committed Jun 5, 2023
    Configuration menu
    Copy the full SHA
    705d953 View commit details
    Browse the repository at this point in the history

  4. Fixed SSH Port Issue.

    Girish Mahabir committed Jun 5, 2023
    Configuration menu
    Copy the full SHA
    89d44b9 View commit details
    Browse the repository at this point in the history

  5. Add $user to su group by default.

    Girish Mahabir committed Jun 5, 2023
    Configuration menu
    Copy the full SHA
    7414f7e View commit details
    Browse the repository at this point in the history

  6. Added some more configs + added ipv6 lo rules + Re-arranged some lines.

    Girish Mahabir committed Jun 5, 2023
    Configuration menu
    Copy the full SHA
    d9d633b View commit details
    Browse the repository at this point in the history

Commits on Jun 13, 2023

  1. Removed some unused paths from ENV, Added CONSOLE: console:tty0:tty1:… 

    …tty01 , added SHA_CRYPT_MIN_ROUNDS 5000 and SHA_CRYPT_MAX_ROUNDS 100000
    Girish Mahabir committed Jun 13, 2023
    Configuration menu
    Copy the full SHA
    4cab180 View commit details
    Browse the repository at this point in the history

  2. Re-factored common-account-cis file to be more readable.

    Girish Mahabir committed Jun 13, 2023
    Configuration menu
    Copy the full SHA
    64caeda View commit details
    Browse the repository at this point in the history

  3. Added full binary path to the bash script.

    Girish Mahabir committed Jun 13, 2023
    Configuration menu
    Copy the full SHA
    87d4bf8 View commit details
    Browse the repository at this point in the history

  4. Added Shell Timeout file with script.

    Girish Mahabir committed Jun 13, 2023
    Configuration menu
    Copy the full SHA
    b19bbf0 View commit details
    Browse the repository at this point in the history

  5. Added CIS Related IPTables Script to /etc/init.d/ , Modified correcte… 

    …d bug for auditd immutable file correction , added cron to fix log permissions every 30 mins, commented pam/common-account file for now , Re-adapted shell timeout , Added Section for the manual steps.
    Girish Mahabir committed Jun 13, 2023
    Configuration menu
    Copy the full SHA
    a622d86 View commit details
    Browse the repository at this point in the history

Commits on Jun 20, 2023

  1. Fixed PAM Login Issue.

    @GirishMahabir
    GirishMahabir committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    eb02f30 View commit details
    Browse the repository at this point in the history

  2. Fixed Pam Issue files updated.

    @GirishMahabir
    GirishMahabir committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    0204638 View commit details
    Browse the repository at this point in the history

  3. Fixed bug in shell script "unknown character \n"

    @GirishMahabir
    GirishMahabir committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    04753f8 View commit details
    Browse the repository at this point in the history

  4. Bash ` bug on an echo line, resolved.

    @GirishMahabir
    GirishMahabir committed Jun 20, 2023
    Configuration menu
    Copy the full SHA
    0f37dea View commit details
    Browse the repository at this point in the history

Commits on Jun 25, 2023

  1. Added Solutions for CIS 1.x.

    @GirishMahabir
    GirishMahabir committed Jun 25, 2023
    Configuration menu
    Copy the full SHA
    ef7b706 View commit details
    Browse the repository at this point in the history

  2. Added Solution for CIS 2.x.

    @GirishMahabir
    GirishMahabir committed Jun 25, 2023
    Configuration menu
    Copy the full SHA
    437a172 View commit details
    Browse the repository at this point in the history

  3. Added Solutions for CIS 4.x and added Variable for GRUB_CMDLINE_LINUX… 

    …_OPTIONS.
    @GirishMahabir
    GirishMahabir committed Jun 25, 2023
    Configuration menu
    Copy the full SHA
    074a177 View commit details
    Browse the repository at this point in the history

Commits on Jun 27, 2023

  1. Added CIS Solution from 4.x -> 5.3.7. Also modified past variable ssh… 

    …_port -> sshport to match previous choice.
    @GirishMahabir
    GirishMahabir committed Jun 27, 2023
    Configuration menu
    Copy the full SHA
    ec14625 View commit details
    Browse the repository at this point in the history

  2. Added Solutions for CIS 5.5.X -> 6.X. 

    Remaining pam configurations.
    @GirishMahabir
    GirishMahabir committed Jun 27, 2023
    Configuration menu
    Copy the full SHA
    94ee640 View commit details
    Browse the repository at this point in the history

Commits on Jul 4, 2023

  1. Removed comments and added space left params to resolve bug.

    @GirishMahabir
    GirishMahabir committed Jul 4, 2023
    Configuration menu
    Copy the full SHA
    8ad98e3 View commit details
    Browse the repository at this point in the history

  2. Moved -w /etc/sudoers -p wa -k scope to a separate line.

    @GirishMahabir
    GirishMahabir committed Jul 4, 2023
    Configuration menu
    Copy the full SHA
    a155b1e View commit details
    Browse the repository at this point in the history

  3. Adapted script based on 1st run behaviour.

    @GirishMahabir
    GirishMahabir committed Jul 4, 2023
    Configuration menu
    Copy the full SHA
    7fa9e8c View commit details
    Browse the repository at this point in the history

Commits on Jul 11, 2023

  1. Completed the PAM Section, tests still in progress tho.

    @GirishMahabir
    GirishMahabir committed Jul 11, 2023
    Configuration menu
    Copy the full SHA
    5cf1156 View commit details
    Browse the repository at this point in the history

  2. Added pool to ntp configuration.

    @GirishMahabir
    GirishMahabir committed Jul 11, 2023
    Configuration menu
    Copy the full SHA
    57adeae View commit details
    Browse the repository at this point in the history

  3. Prepared login.defs file.

    @GirishMahabir
    GirishMahabir committed Jul 11, 2023
    Configuration menu
    Copy the full SHA
    8a6ece2 View commit details
    Browse the repository at this point in the history

  4. Tested and adapted the audit rules.

    @GirishMahabir
    GirishMahabir committed Jul 11, 2023
    Configuration menu
    Copy the full SHA
    43ee6de View commit details
    Browse the repository at this point in the history

  5. AIDE Checker and Timer Tested and adapted.

    @GirishMahabir
    GirishMahabir committed Jul 11, 2023
    Configuration menu
    Copy the full SHA
    61b6b57 View commit details
    Browse the repository at this point in the history

Commits on Sep 20, 2023

  1. Fixed some missed rules, typos etc.

    @GirishMahabir
    GirishMahabir committed Sep 20, 2023
    Configuration menu
    Copy the full SHA
    79ed600 View commit details
    Browse the repository at this point in the history

Commits on Oct 2, 2023

  1. Updated Debian 11 CIS CI (Added Additional Rules)

    @GirishMahabir
    GirishMahabir committed Oct 2, 2023
    Configuration menu
    Copy the full SHA
    5afb613 View commit details
    Browse the repository at this point in the history