search

dev-sec / chef-os-hardening

This chef cookbook provides numerous security-related configurations, providing all-round base protection.
http://dev-sec.io/
Apache License 2.0
439 stars 135 forks source link

Support for RHEL 8 / Rocky Linux 8 #279

Closed krayjay closed 1 year ago

krayjay commented 1 year ago

Is your feature request related to a problem? Please describe. I can run this cookbook in Rocky Linux 8, but the compliance report shows the scan results as: 19 passed controls, 5 failed controls, and 44 were skipped (due to thinking /etc/ssh/sshd file does not exist, yet it does)

Describe the solution you'd like Support for RHEL 8 since 9 has been out for a little bit and 8 still isn't supported. RHEL = Rocky Linux so fixing both would be phenomenal.

Describe alternatives you've considered Ansible if the Chef community can't keep these popular cookbooks updated, unfortunately.

schurzi commented 1 year ago

Thank you for this input. As you observed in the alternatives section, we currently put more effort in maintaining our Ansible implementation. We also recognize the popularity of the chef cookbooks, but currently we lack maintainer time to keep everything equally up-to-date.

A sidenote to your experience with the compliance profile. If this many controls are skipped you should try running it as root user.

artem-sidorenko commented 1 year ago

@krayjay I added the CI tests for EL 8-9 linux distro, including rocky linux 8. As far I can see everything works and tests are passing, even on the old chef-os-hardening release 4.0.0. Is there anything I miss or any specific problem which needs to be fixed?

artem-sidorenko commented 1 year ago

I'm closing this issue, feel free to reopen if needed