ansible-lockdown / RHEL8-CIS

Ansible role for Red Hat 8 CIS Baseline
https://ansible-lockdown.readthedocs.io/en/latest/
MIT License
268 stars 165 forks source link

CIS Red Hat Enterprise Linux 8 Benchmark v3.0.0 #324

Closed bbaassssiiee closed 7 months ago

bbaassssiiee commented 1 year ago

Feature Request or Enhancement

Summary of Request The DRAFT CIS Red Hat Enterprise Linux 8 Benchmark v3.0.0 is available for download and review

This consensus period is scheduled to close on 19 October 2023, pending any new comments and open tickets.

bbaassssiiee commented 12 months ago
bbaassssiiee commented 12 months ago

Only /dev/shm and /tmp should be separate partitions.

msachikanta commented 11 months ago

When the v3.0.0 role will be available? any timelines please?

mynameisORIG commented 10 months ago

Hi, I also would be interested in seeing the v3.0.0 CIS RHEL8 benchmark come out. How far along are y'all?

uk-bolly commented 10 months ago

Hi Im just finishing off V3 this week, it has taken almost a complete rewrite, due to all the changes. At the same time i have updates the audit as well. This will be in pre-release to subscribers before releasing to the community in approx 3 months. Thanks

uk-bolly

toddtherod commented 10 months ago

This will be in pre-release to subscribers before releasing to the community in approx 3 months.

I'm also interested ...What is involved in becoming a subscriber? Which git repo tag/branch is used for this V3 pre-release version? Thanks

uk-bolly commented 10 months ago

This will be in pre-release to subscribers before releasing to the community in approx 3 months.

I'm also interested ...What is involved in becoming a subscriber? Which git repo tag/branch is used for this V3 pre-release version? Thanks

hi @toddtherod

The latest release remediation code is in a restricted repo currently only available to subscribers to lockdown enterprise. While the audit code is available now in the public repo. There is more information about the subscription at https://lockdownenterprise.com. I hope that helps, if you have any questions feel free to ask here or join the discord community and find out more.

Discord Server

thanks

uk-bolly

bbaassssiiee commented 7 months ago

I'm testing the devel branch since 3.0.0 was merged by https://github.com/ansible-lockdown/RHEL8-CIS/pull/351

bbaassssiiee commented 7 months ago

Raising a few eyebrows...