gardenlinux
gardenlinux copied to clipboard
CIS Feature: Overall Review
What would you like to be added:
A final overall review of the new CIS feature should be done by someone else who wasn't working mainly (@gyptazy & @chrinorse) on this feature.
:small_red_triangle: Note: We can only start with the final review when all related task in #647 are completed. Do not start before! :small_red_triangle:
This should cover:
- [ ] Validating the related changes to Garden Linux (OS related)
- [ ] Validating the custom check scripts that have been added/modded (this was needed e.g. for replacing
TripwirewithAIDE,AppArmorwithSELinux, ..). These files can be found here: https://github.com/gardenlinux/gardenlinux/tree/main/features/cis/test/check_scripts - [ ] Validating the whitelisted checks (may be we can change some settings and perform checks, ...). These ones can be found here: https://github.com/gardenlinux/gardenlinux/tree/main/features/cis/test/conf.d
- [ ] Validating that all scored checks are covered and handled in any way (Compare with https://learn.cisecurity.org/benchmarks)
Why is this needed: We need to make sure that we have really covered all action points and should have this reviewed by someone else.