elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2024-11-22 05:27:01 +01:00
Code Issues Packages Projects Releases Wiki Activity
535 Commits 4 Branches 39 Tags 2.2 MiB
f888ce0d39
Commit Graph

73 Commits

Author SHA1 Message Date
GoldenKiwi
f888ce0d39
fix: root_dir is still /opt/cis-hardening for the moment (#208) 2023-10-02 14:50:52 +02:00
thibault.dewailly
f6aa306127
bump to 4.1.1 2023-09-29 14:38:52 +00:00
GoldenKiwi
2e53dfb573
feat: Officialize Debian 12 support (#206) 
* feat: Officialize Debian 12 support

Functional tests now pass
CIS Benchmark PDF for Debian 12 is not out yet, but the hardening points checked
are still relevant in Debian 12.
OVHcloud is now using it in critical production, hence making it officially supported

---------

Co-authored-by: ThibaultDewailly <ThibaultDewailly@users.noreply.github.com>
 2023-09-29 16:20:34 +02:00
P-EB
32886d3a3d
Replace CIS_ROOT_DIR by a more flexible system (#204) 
* Replace CIS_ROOT_DIR by a more flexible system

* Try to adapt the logic change to the functional tests
 2023-09-25 14:24:01 +02:00
GoldenKiwi
f2cc14c383
fix: chore debian manual update (#198) 
* fix: chore debian manual update

fixes #182

* Regenerate man pages (Github action)

---------

Co-authored-by: ThibaultDewailly <ThibaultDewailly@users.noreply.github.com>
 2023-08-31 14:34:59 +02:00
thibault.dewailly
bc98bedf73 bump to 4.0-1 2023-07-10 07:21:13 +00:00
GoldenKiwi
f28ffc244c
fix: correct debian package compression override (#181) 2023-05-02 18:06:59 +02:00
thibault.dewailly
06525f06f9 bump to 3.8-1 2023-03-23 10:03:37 +00:00
ymartin-ovh
e478a89bad
bump to 3.7-1 (#160) 2022-07-04 15:37:08 +02:00
Tarik Megzari
ea8334d516
bump to 3.6-1 (#157) 
Signed-off-by: Tarik Megzari <tarik.megzari@corp.ovh.com>
 2022-06-27 12:13:01 +02:00
Tarik Megzari
7a3145d7f1
bump to 3.5-1 (#152) 
Signed-off-by: Tarik Megzari <tarik.megzari@corp.ovh.com>
 2022-03-23 18:40:25 +01:00
GoldenKiwi
d1bd1eb2e7
bump to 3.4-1 (#150) 2022-03-18 16:49:25 +01:00
Tarik Megzari
a0d33ab158
Update changelog for release 3.3-1 (#146) 
Signed-off-by: Tarik Megzari <tarik.megzari@corp.ovh.com>

Co-authored-by: Tarik Megzari <tarik.megzari@corp.ovh.com>
 2022-03-03 10:26:42 +01:00
Tarik Megzari
f1c1517bd2
Update changelog for release 3.2-2 (#135) 
Signed-off-by: Tarik Megzari <tarik.megzari@corp.ovh.com>

Co-authored-by: Tarik Megzari <tarik.megzari@corp.ovh.com>
 2021-12-13 16:06:57 +01:00
thibault.dewailly
c8fcfed248 Update changelog for release 3.2-1 2021-12-01 11:04:56 +00:00
Thibault Ayanides
334d743125
fix EXCEPTIONS management (#104) 
* FIX(1.1.21, 6.1.10) fix EXCEPTIONS management
* Update changelog
* Refactor test for 6.1.10-14
 2021-06-02 13:47:19 +02:00
Thibault Ayanides
4ed8adf790
Update changelog (#103) 2021-05-28 15:06:48 +02:00
Thibault Ayanides
29505255ff
Update changelog (#99) 2021-05-07 09:16:15 +02:00
Thibault Ayanides
dd41988933 Update changelog 2021-04-13 11:00:29 +02:00
Thibault Ayanides
d26ad48416 Update changelog 2021-04-02 09:25:41 +02:00
Thibault Ayanides
cbd81b8ab2
Update changelog (#82) 2021-03-26 12:16:50 +01:00
Thibault Ayanides
fb5be208ef Update changelog 2021-03-15 08:25:26 +01:00
Thibault Ayanides
6ae05f3fa2
Add dealing with debian 11 
* ADD: add dockerfile for debian11
* FIX: fix crontab file not found on debian11 blank
* Add workflow for debian11
* FIX: fix debian version func to manage debian11
* Add dealing with unsupported version and distro
* Add 99.99 check that check if distro version is supported
* Use global var for debian major and distro

fix #26
 2021-02-08 13:54:24 +01:00
jeremydenoun
0b6ea0d97e
IMP: add multiple Improvements 
* add new kernel module detection (enable & listing)  with detection of monolithic kernel
* change way to detect if file system type is disabled
* add global IS_CONTAINER variable
* disable test for 3.4.x to be consistent with others
* add cli options to override configuration loglevel
 2021-02-04 16:21:49 +01:00
jeremydenoun
0edb837f80
Remove bc dependency 
Co-authored-by: Jeremy Denoun <jeremy.denoun@iguanesolutions.com>
 2021-01-22 09:31:53 +01:00
Thibault Ayanides
047421f2d8 Regenerate man pages (Github action) 2021-01-18 15:47:41 +01:00
Thibault Ayanides
3217429679 Regenerate man pages (Github action) 2021-01-18 11:45:13 +01:00
Thibault Ayanides
af38e4f404 Update changelog 2021-01-18 11:45:13 +01:00
Thibault Ayanides
4281ed330a Update compat in debian package 2021-01-18 11:45:13 +01:00
Thibault Ayanides
7c69305b44 Update changelog 2021-01-04 08:20:59 +01:00
Thibault Ayanides
233f75023a FIX(4.1.17): fix typo leading to false positive 2021-01-04 08:15:39 +01:00
Thibault Ayanides
3560f67e3f Update changelog 2020-12-14 16:56:09 +01:00
Thibault Ayanides
106fa5fc8a Update changelog 2020-12-04 14:24:34 +01:00
Thibault Ayanides
9c3aa51982 Update changelog 2020-11-30 15:16:36 +01:00
Thibault Ayanides
d40a85085d FIX: fix issue, we had to run audit twice 
First one as root to create conf files with good owner and permissions, and then with secaudit.
Now first run with --create-config-files-only and the normally with --audit.
 2020-11-20 10:05:14 +01:00
Thibault Ayanides
9bfb7efca1 Update changelog 2020-11-16 16:39:47 +01:00
Thibault Ayanides
e288835381 Update changelog 2020-11-16 14:21:47 +01:00
Thibault Ayanides
6620a82f34 Update changelog 2020-11-12 10:17:32 +01:00
Thibault Ayanides
4dc8701132 Update changelog 2020-10-30 16:43:48 +01:00
Thibault Ayanides
f71d34a31b Update changelog 2019-10-30 15:42:59 +01:00
Thibault
0fa10240cd Update changelog 2020-10-28 09:26:51 +01:00
Thibault Ayanides
88e3a515ef 5.2.17_sshd_login_grace_time 2020-10-05 17:26:13 +02:00
Benjamin MONTHOUEL
70be679567 IMP(12.8,12.9,12.10,12.11): be able to exclude some paths 
consider exclusions in apply() functions
 2020-03-31 14:22:24 +02:00
Benjamin MONTHOUEL
413277d7eb IMP(12.8,12.9): be able to exclude some paths 2020-03-30 19:11:07 +02:00
Stéphane Lesimple
e62648d6a4 release 1.3.1-1 2019-10-22 15:08:56 +02:00
Charles Herlin
20dacdf6c7 CHORE: change in version numbering 2019-08-28 14:59:51 +02:00
Charles Herlin
19ee1cabf8 Update changelog 2019-08-28 12:35:58 +02:00
kevin.tanguy
89cf484cb9 fix(99.4): do not stderr iptables warning on buster 2019-08-14 10:36:25 +02:00
Charles Herlin
13783423c2 changelog: update changelog 
Conflicts:
	debian/changelog
 2019-04-04 16:27:17 +02:00
Charles Herlin
b2f7460977 changelog: update to 1.2-4 2019-04-04 16:27:17 +02:00