elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-09-04 13:38:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Damcava35/deb12 scripts 10 (#294)

Browse Source 
* fix ssh related tests

As letting sshd active will mess with others scripts later

* feat: add debian12 scripts

- nftables_loopback_is_configured.sh 	-> 4.2.6
- nftables_established_connections.sh 	-> 4.2.7
- iptables_flushed_with_nftables.sh 	-> 4.2.3
- ufw_loopback_is_configured.sh 	-> 4.1.4
- ufw_outbound_connection.sh 		-> 4.1.5
- ufw_default_deny.sh 			-> 4.1.7
- ufw_rules_them_all.sh 		-> 4.1.6

---------

Co-authored-by: damien cavagnini <damien.cavagnini@corp.ovh.com>
This commit is contained in:
damcav35
2025-09-02 13:57:12 +02:00
committed by GitHub
parent f0075600e1
commit 9bd170438c
40 changed files with 839 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cisharden.sudoers
View File

@@ -14,6 +14,7 @@ Cmnd_Alias SCL_CMD = /bin/grep ,\
/usr/bin/cut,\
/sbin/iptables -nL,\
/sbin/iptables -nL *,\
/sbin/iptables -S *,\
/sbin/sysctl net.*,\
/sbin/sysctl fs.*,\
/sbin/sysctl kernel.*,\
@@ -28,6 +29,7 @@ Cmnd_Alias SCL_CMD = /bin/grep ,\
/usr/bin/ss *,\
/bin/ss *,\
/usr/bin/pgrep *,\
/usr/sbin/nft list *
/usr/sbin/nft list *,\
/usr/sbin/ufw status *
cisharden ALL = (root) NOPASSWD: SCL_CMD