Open sparshev opened 2 years ago
It could be useful to have hardened base images and it's possible by already prepared CIS ansible roles from https://github.com/orgs/ansible-lockdown - it supports quite a big amount of supported distributions (including ubuntu 2022 & windows 2022). For MacOS there is not much (but could be found on github: https://github.com/jamf/CIS-for-macOS-High-Sierra-CP , https://github.com/samtekinc/CIS-hardening-macOS-BigSur , https://github.com/remy-tiitre/secure-osx).
It could be useful to have hardened base images and it's possible by already prepared CIS ansible roles from https://github.com/orgs/ansible-lockdown - it supports quite a big amount of supported distributions (including ubuntu 2022 & windows 2022). For MacOS there is not much (but could be found on github: https://github.com/jamf/CIS-for-macOS-High-Sierra-CP , https://github.com/samtekinc/CIS-hardening-macOS-BigSur , https://github.com/remy-tiitre/secure-osx).