elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-09-04 21:48:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

Damcava35/deb12 scripts 10 (#294)

Browse Source 
* fix ssh related tests

As letting sshd active will mess with others scripts later

* feat: add debian12 scripts

- nftables_loopback_is_configured.sh 	-> 4.2.6
- nftables_established_connections.sh 	-> 4.2.7
- iptables_flushed_with_nftables.sh 	-> 4.2.3
- ufw_loopback_is_configured.sh 	-> 4.1.4
- ufw_outbound_connection.sh 		-> 4.1.5
- ufw_default_deny.sh 			-> 4.1.7
- ufw_rules_them_all.sh 		-> 4.1.6

---------

Co-authored-by: damien cavagnini <damien.cavagnini@corp.ovh.com>
This commit is contained in:
damcav35
2025-09-02 13:57:12 +02:00
committed by GitHub
parent f0075600e1
commit 9bd170438c
40 changed files with 839 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
tests/hardening/sshd_ciphers.sh
View File

@@ -19,4 +19,6 @@ test_audit() {
register_test retvalshouldbe 0
register_test contain "[ OK ] ^Ciphers[[:space:]]*chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr is present in /etc/ssh/sshd_config"
run resolved "${CIS_CHECKS_DIR}/${script}.sh" --audit-all
describe Clean test
pkill -9 sshd
}