search

tom-krieger / cis_security_hardening

Define a complete security baseline and monitor the baseline's rules. The definition of the baseline should be done in Hiera. The purpose of the module is to give the ability to setup a complete security baseline which not necessarily have to stick to industry security guides like the CIS benchmarks.
Apache License 2.0
18 stars 12 forks source link

hiera.yaml does not detect operating system correctly #13

Closed parryb closed 2 years ago

parryb commented 2 years ago

hiera.yaml should have operating system detection through the use of facts to correctly determine the hierarchy of the params and rule datasets. I would suggest using the fact os.family or os.name.

i.e. AlamaLinux ~ RedHat so you would use os.family but could use os.name if you wanted separate them out?

tom-krieger commented 2 years ago

CIS benchmarks are different for each OS and even for each OS version. I check what can be done.

tom-krieger commented 2 years ago

Fixed with v0.7.7