elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-08-31 11:54:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Damcava35/deb12 scripts 4 (#287)

Browse Source 
* fix: ipv6 may be enabled on a single interface

* feat: add new checks for debian12

systemd_timesyncd_is_enabled_and_running.sh	-> 2.3.2.2
rpcbind_is_disabled.sh				-> 2.1.12
ftp_client_not_installed.sh			-> 2.2.6
chrony_with_chrony_user.sh			-> 2.3.3.2
ipv6_is_enabled.sh				-> 3.1.1

---------

Co-authored-by: damien cavagnini <damien.cavagnini@corp.ovh.com>
Co-authored-by: GoldenKiwi <thibault.dewailly@corp.ovh.com>
This commit is contained in:
damcav35
2025-08-12 14:42:37 +02:00
committed by GitHub
parent f85f1f25e7
commit 94f110d9b3
16 changed files with 643 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
cisharden.sudoers
View File

@@ -26,6 +26,7 @@ Cmnd_Alias SCL_CMD = /bin/grep ,\
/usr/sbin/modprobe -n -v*,\
/usr/sbin/apparmor_status,\
/usr/bin/ss *,\
/bin/ss *
/bin/ss *,\
/usr/bin/pgrep *
cisharden ALL = (root) NOPASSWD: SCL_CMD