Code

Debian 11 CIS CI Compliance#54

Code

Open

GirishMahabir wants to merge 33 commits intoJsitech:masterJsitech/JShielder:masterfrom GirishMahabir:debian-11-CIS-CI-complientGirishMahabir/JShielder:debian-11-CIS-CI-complientCopy head branch name to clipboard

+2,873-4

Commits

Commits on May 23, 2023

• Initial Commit with base.

  

  Girish Mahabir

  committed
  ead90b8

  Copy full SHA for ead90b8

Commits on May 24, 2023

• Added 99-finalize.rules for audit, sudoers use_pty, su group creation and journalctl storage and compression set.

  

  Girish Mahabir

  committed
  925bde5

  Copy full SHA for 925bde5

Commits on May 30, 2023

• Re-arranged folders and adapted JShielder script.

  

  Girish Mahabir

  committed
  910d35b

  Copy full SHA for 910d35b

Commits on Jun 5, 2023

• Updated Iptables script, Updated how the port is updated in the script and fixed common-account-CIS bug.

  

  Girish Mahabir

  committed
  4af16e8

  Copy full SHA for 4af16e8

• Removed Reboot section.

  

  Girish Mahabir

  committed
  6ffffd1

  Copy full SHA for 6ffffd1

• Optimized sed for ssh port.

  

  Girish Mahabir

  committed
  705d953

  Copy full SHA for 705d953

• Fixed SSH Port Issue.

  

  Girish Mahabir

  committed
  89d44b9

  Copy full SHA for 89d44b9

• Add $user to su group by default.

  

  Girish Mahabir

  committed
  7414f7e

  Copy full SHA for 7414f7e

• Added some more configs + added ipv6 lo rules + Re-arranged some lines.

  

  Girish Mahabir

  committed
  d9d633b

  Copy full SHA for d9d633b

Commits on Jun 13, 2023

• Removed some unused paths from ENV, Added CONSOLE: console:tty0:tty1:tty01 , added SHA_CRYPT_MIN_ROUNDS 5000 and SHA_CRYPT_MAX_ROUNDS 100000

  

  Girish Mahabir

  committed
  4cab180

  Copy full SHA for 4cab180

• Re-factored common-account-cis file to be more readable.

  

  Girish Mahabir

  committed
  64caeda

  Copy full SHA for 64caeda

• Added full binary path to the bash script.

  

  Girish Mahabir

  committed
  87d4bf8

  Copy full SHA for 87d4bf8

• Added Shell Timeout file with script.

  

  Girish Mahabir

  committed
  b19bbf0

  Copy full SHA for b19bbf0

• Added CIS Related IPTables Script to /etc/init.d/ , Modified corrected bug for auditd immutable file correction , added cron to fix log permissions every 30 mins, commented pam/common-account file …

  Show description for a622d86
  

  Girish Mahabir

  committed
  a622d86

  Copy full SHA for a622d86

Commits on Jun 20, 2023

• Fixed PAM Login Issue.

  GirishMahabir

  committed
  eb02f30

  Copy full SHA for eb02f30

• Fixed Pam Issue files updated.

  GirishMahabir

  committed
  0204638

  Copy full SHA for 0204638

• Fixed bug in shell script "unknown character \n"

  GirishMahabir

  committed
  04753f8

  Copy full SHA for 04753f8

• Bash ` bug on an echo line, resolved.

  GirishMahabir

  committed
  0f37dea

  Copy full SHA for 0f37dea

Commits on Jun 25, 2023

• Added Solutions for CIS 1.x.

  GirishMahabir

  committed
  ef7b706

  Copy full SHA for ef7b706

• Added Solution for CIS 2.x.

  GirishMahabir

  committed
  437a172

  Copy full SHA for 437a172

• Added Solutions for CIS 4.x and added Variable for GRUB_CMDLINE_LINUX_OPTIONS.

  GirishMahabir

  committed
  074a177

  Copy full SHA for 074a177

Commits on Jun 27, 2023

• Added CIS Solution from 4.x -> 5.3.7. Also modified past variable ssh_port -> sshport to match previous choice.

  GirishMahabir

  committed
  ec14625

  Copy full SHA for ec14625

• Added Solutions for CIS 5.5.X -> 6.X.

  Show description for 94ee640
  GirishMahabir

  committed
  94ee640

  Copy full SHA for 94ee640

Commits on Jul 4, 2023

• Removed comments and added space left params to resolve bug.

  GirishMahabir

  committed
  8ad98e3

  Copy full SHA for 8ad98e3

• Moved -w /etc/sudoers -p wa -k scope to a separate line.

  GirishMahabir

  committed
  a155b1e

  Copy full SHA for a155b1e

• Adapted script based on 1st run behaviour.

  GirishMahabir

  committed
  7fa9e8c

  Copy full SHA for 7fa9e8c

Commits on Jul 11, 2023

• Completed the PAM Section, tests still in progress tho.

  GirishMahabir

  committed
  5cf1156

  Copy full SHA for 5cf1156

• Added pool to ntp configuration.

  GirishMahabir

  committed
  57adeae

  Copy full SHA for 57adeae

• Prepared login.defs file.

  GirishMahabir

  committed
  8a6ece2

  Copy full SHA for 8a6ece2

• Tested and adapted the audit rules.

  GirishMahabir

  committed
  43ee6de

  Copy full SHA for 43ee6de

• AIDE Checker and Timer Tested and adapted.

  GirishMahabir

  committed
  61b6b57

  Copy full SHA for 61b6b57

Commits on Sep 20, 2023

• Fixed some missed rules, typos etc.

  GirishMahabir

  committed
  79ed600

  Copy full SHA for 79ed600

Commits on Oct 2, 2023

• Updated Debian 11 CIS CI (Added Additional Rules)

  GirishMahabir

  committed
  5afb613

  Copy full SHA for 5afb613