RHEL8-CIS-Audit

RHEL8-CIS-Audit copied to clipboard

# Pull request details **Overall Review of Changes:** Script update and workflow tidy **How has this been tested?:** Manually

uk-bolly

Syntax error on run_audit.sh

2

**Describe the Issue** When running `run_audit.sh`, you get the following error: ```bash tr: missing operand after ‘[:lower:]’ Two strings must be given when translating. Try 'tr --help' for more information....

cpeetersburg

bug in use audit with goss >0.4.x

7

There are plans to rework the audit to work with goss version >0.4.x When using version >0.4.x, the field does not contain the correct queries: "matcher-result": { ### "Actual": "object:...

sysop200

**Describe the Issue** in cis_1.1.7.1_5.yml audit, one test checks for quota package, this is a part of the test for usrquota and grpquota. This test is not inside an if...

aaosopra

I found duplicate checks in the sections. I do not understand why? Version goss 0.4.3 immediately speaks about this. Example, please check section_3/cis_3.3/cis_3.3.7.yml check duplicated net.ip4.conf.all.rp_filter And this problem exists...

sysop200

**Feature Request or Enhancement:** - Feature [ Change rhel8cis_firewall_interface in ansible_vars_goss.yml.j2 to take variable] - Enhancement [Not everyone uses enp0s3 or enp0s8 network interface] **Summary of Request** Want to be...

aaosopra

Remote audit with Goss

1

Greetings colleagues! I want to ask - is it possible to do a cis audit on many remote computers, so as not to logon into each

sysop200

**Describe the Issue** the playbook stops when trying to upload / unpack the RHEL8-CIS-Audit.tar.gz ``` ASK [/home/hal/ansible/hardening/RHEL8-CIS : Pre Audit Setup | Copy ansible default vars values to test audit]...

txsastre