florianutz / Ubuntu1804-CIS

Ubuntu CIS Hardening Ansible Role
MIT License
212 stars 127 forks source link

squashfs and FAT file systems not on CIS document for Ubuntu #6

Closed ianj101 closed 5 years ago

ianj101 commented 5 years ago

Hi Florian Looking at the latest CIS_Ubuntu_Linux_18.04_LTS_Benchmark_v1.0.0.pdf document, in sections 1.1.1.* , there is no mention of squashfs and FAT file systems, there is on the RHEL7 document but not on Ubuntu? Regards Ian

florianutz commented 5 years ago

Hi Ian, I suppose you want to know why there is no squashfs and FAT section in the Ubuntu benchmark? This repository is just a implementation of the CIS benchmark. If you want to talk about the content of the benchmarks you should join the CIS community.

ianj101 commented 5 years ago

Hi Florian

But the Ubuntu benchmark does not include squashfs and FAT filesystems and your playbook does, which means the references in your code don’t match the CIS Ubuntu benchmark, I was just offering feedback

Regards

Ian

florianutz commented 5 years ago

Hi Ian,

squashfs and FAT is still there because it was in 16.04 Benchmark. There are some discussions regarding these file-system options. It have to do some testings before I will remove it.