search

ansible-lockdown / UBUNTU22-CIS

Ansible role for Ubuntu22 CIS Baseline
https://ansible-lockdown.readthedocs.io/en/latest/
MIT License
155 stars 68 forks source link

Fixes 4.1.3.6 to match CIS v1.0.0 benchmark #226

Closed dderemiah closed 2 months ago

dderemiah commented 2 months ago

Overall Review of Changes: Fixed 4.1.3.6 to match CIS v1.0.0 benchmark. /snap can have privileged commands and should not be excluded from collection. All audit scanners are looking at /snap as part of the system.

Issue Fixes: removes the grep -v /snap as this deviates from CIS benchmark

Enhancements: N/A

How has this been tested?: tested locally