Ubuntu1804-CIS
Ubuntu1804-CIS copied to clipboard
florianutz
Ubuntu CIS Hardening Ansible Role
This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of...
**Describe the bug** TASK [florianutz.ubuntu1804_cis : SCORED | 1.4.2 | PATCH | Ensure filesystem integrity is regularly checked] ****** fatal: [192.168.56.110]: FAILED! => {"changed": false, "msg": "Will not manage /etc/crontab...
**Describe the bug** When running the role Remove squashfs module, the job fails because it reports that Module squashfs is builtin and cannot be removed. TASK [Ubuntu1804-CIS : SCORED |...
**Describe the bug** https://github.com/florianutz/Ubuntu1804-CIS/blob/5478c0e8ef437365b1aff45d81a86943d3162656/tasks/section3.yml#L516 'all' is not a valid interface name or keyword, as such applying this rule will block all outbound traffic. It results in the following iptables rule:...
Have followed the steps to install via here: https://cloudsecuritylife.com/cis-ubuntu-script-to-automate-server-hardening/ Have tested on a couple of Ubuntu machines and the issue persists. ERROR! 'collections' is not a valid attribute for a...
As a part of the transition from Travis to GitHub Actions, the last part of the workflow that I did not yet address is the notification on success to the...
**Is your feature request related to a problem? Please describe.** some handlers use commands like `systemd restart tmp.mount`, which can be disabled by setting the `ubuntu1804cis_skip_for_travis` variable but `systemd restart...
https://github.com/florianutz/Ubuntu1804-CIS/blob/dc95662250817f1fb6fef05a9361ca4cc0094cc0/tasks/section1.yml#L677 `dmesg` will eventually roll over and this check will fail. Using `journalctl -b` is slowed but will work for longer. Example from a rather vanilla install of 18.04 server:...
