elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-08-04 14:21:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: add new checks for debian12

Browse Source 
systemd_timesyncd_is_enabled_and_running.sh	-> 2.3.2.2
rpcbind_is_disabled.sh				-> 2.1.12
ftp_client_not_installed.sh			-> 2.2.6
chrony_with_chrony_user.sh			-> 2.3.3.2
ipv6_is_enabled.sh				-> 3.1.1
This commit is contained in:
damien cavagnini
2025-07-23 10:09:28 +02:00
parent eda302d55f
commit a7bc6a47f9
19 changed files with 562 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cisharden.sudoers
View File

@@ -25,6 +25,8 @@ Cmnd_Alias SCL_CMD = /bin/grep ,\
/sbin/modprobe,\
/usr/sbin/modprobe -n -v*,\
/usr/sbin/apparmor_status,\
/usr/bin/ss *
/usr/bin/ss *,\
/bin/ss *,\
/usr/bin/ps *
cisharden ALL = (root) NOPASSWD: SCL_CMD