content
content copied to clipboard
Security automation content in SCAP, Bash, Ansible, and other formats
#### Description: - Update Ubuntu 22.04 STIG references and profile titles
#### Description: This PR is improving the readability of `CMakeLists.txt` basically by: - Grouping similar entries - Organizing the output messages - Reviewing comments #### Rationale: Improve readability of `CMakeLists.txt`...
#### Description: - `4.1` is not applicable Documentation and processes are not be created and maintained at in OpenShift. - `4.2` is partially applicable While OCP uses and can provide...
#### Description: Initial ISM O RHEL 10 Profile #### Rationale: RHEL 10 Content
#### Description: Notes / Rules for BSI APP4.4.A21 added. #### Rationale: As we have multiple customers asking for a BSI profile to be included in the compliance-operator, we are contributing...
#### Description: CI check to notify if a Ansible `shell`/`command` module usage has been changed. It's preferred to use specific Ansible module rather than abuse `shell` (`command`) module. So we...
#### Description: During some tests it was found two variables without a default value. Ensure a default value based on existing options. #### Rationale: All variables have a default value.
#### Description: I had to conduct some tests with variables in profiles and it became much easier when this class was expanded to also map variables instead of only rules....
#### Description: - Added enabling of dconf profiles to the remediation of the individual dconf rules instead of relying on rule `enable_dconf_user_profile`. - Created new macro `bash_enable_dconf_user_profile` for enabling dconf...
#### Description of problem: I ran `ansible-playbook harden-al2.yml`. However, it's failing at Set SELinux boolean ssh_sysadm_login accordingly. #### SCAP Security Guide Version: #### Operating System Version: Amazon Linux 2 ####...