feat: official Debian 11 compatibility - Githubissues

ovh / debian-cis

PCI-DSS compliant Debian 10/11/12 hardening

Other

756 stars 130 forks source link

feat: official Debian 11 compatibility #176

Closed ThibaultDewailly closed 1 year ago

ThibaultDewailly commented 1 year ago

Introduce Debian 11 compatibility Based on CIS_Debian_Linux_11_Benchmark_v1.0.0

After review, here are the notable changes :

Harden /var/log more (noexec,nodev,nosuid)
Harden /var/log/audit more (noexec,nodev,nosuid)
Harden /home more (nosuid)
Disable cramfs
Fix 5.3.4_acc_pam_sha512.sh
Deprecate Debian 9 and remove useless docker images

NB : more audit log rules have been introduced and will be inserted in the checks later