Commit Graph

  • f82f275f48
    Bump luizm/action-sh-checker from v0.1.12 to v0.1.13 dependabot[bot] 2021-03-15 08:20:50 +0000
  • fb5be208ef Update changelog v3.1-0 Thibault Ayanides 2021-02-08 14:50:20 +0100
  • 48585ce504
    Bump dev-drprasad/delete-tag-and-release from v0.1.3 to v0.2.0 dependabot[bot] 2021-03-12 06:46:59 +0000
  • d2e3a7c914
    Replace exit code 128 by exit code 2 Thibault Ayanides 2021-02-22 13:58:48 +0100
  • 247259a5c9
    Deal with non existant /run/shm Thibault Ayanides 2021-02-22 13:53:03 +0100
  • 5bd63bf7d4
    Remove useless SUDO_CMD Thibault Ayanides 2021-02-22 13:39:21 +0100
  • e8f8af898b
    FIX(99.3.3.x): check conf file exist Thibault Ayanides 2021-02-22 11:01:57 +0100
  • 1b9a8b51a9
    FIX(5.2.1): check package install Thibault Ayanides 2021-02-22 11:01:17 +0100
  • ffbda860fb
    FIX(5.1.x): check crontab files exist Thibault Ayanides 2021-02-22 11:00:47 +0100
  • 0d5aa9a86e
    FIX(4.2.x): check package install Thibault Ayanides 2021-02-22 10:47:23 +0100
  • 3fd6110039
    FIX(2.2.15): check package install Thibault Ayanides 2021-02-22 10:47:05 +0100
  • f17f85eb97
    FIX(1.6.1,1.7.1.x): check if apparmor and grub is installed Thibault Ayanides 2021-02-22 10:14:27 +0100
  • 256cf78820
    FIX(4.1.1.4): bad pattern Thibault Ayanides 2021-02-22 09:34:30 +0100
  • 0abaebb5d1
    Update changelog Thibault Ayanides 2021-02-08 14:50:20 +0100
  • b44fb47c3a
    add log details to be more comprehensive (#49) jeremydenoun 2021-02-17 12:04:11 +0100
  • 9ba2f2f4ac
    Merge branch 'master' into fix_msg Thibault Ayanides 2021-02-17 12:00:22 +0100
  • 84ac4db90f
    fix incorrect path from ls (#45) jeremydenoun 2021-02-17 12:00:13 +0100
  • ba2bfeb119
    Merge branch 'master' into fix_limit Thibault Ayanides 2021-02-17 11:52:03 +0100
  • 40fb536d4e
    Add missing HARDENING_LEVEL (#44) Thibault Ayanides 2021-02-17 11:51:51 +0100
  • dc72623efd
    Merge branch 'master' into hardening-levels GoldenKiwi 2021-02-17 11:45:40 +0100
  • d1b371f410
    Add is_ipv6_disabled (#57) Thibault Ayanides 2021-02-17 11:45:20 +0100
  • 98d3e770e3
    Merge branch 'master' into disable-check-ipv6-disabled GoldenKiwi 2021-02-17 11:40:48 +0100
  • 6ab1cab3ce
    IMP(5.1.8): allow more restrictive permissions (#59) Thibault Ayanides 2021-02-17 11:40:31 +0100
  • 0513504026
    Merge branch 'master' into cron-user-perms GoldenKiwi 2021-02-17 11:37:11 +0100
  • 1a7dd5893a
    Use pam_faillock instead of pam_tally for bullseye (#56) Thibault Ayanides 2021-02-17 11:36:58 +0100
  • 5ef7d037b9
    Merge branch 'master' into pam-faillock GoldenKiwi 2021-02-17 11:33:48 +0100
  • fa111bc0d0
    Update mac and kex to match debian10 CIS (#60) Thibault Ayanides 2021-02-17 11:31:22 +0100
  • 857a0e8727
    Merge branch 'master' into sshd-ciphers-max-kex GoldenKiwi 2021-02-17 11:21:11 +0100
  • 460843ffb3
    Fix #51 (#58) Thibault Ayanides 2021-02-17 11:19:38 +0100
  • 4414378783
    Update mac and kex to match debian10 CIS Thibault Ayanides 2021-02-15 15:51:24 +0100
  • 6ea539a797
    IMP(5.1.8): allow more restrictive permissions Thibault Ayanides 2021-02-15 13:39:08 +0100
  • 637153a9e2
    Fix #51 Thibault Ayanides 2021-02-15 12:07:42 +0100
  • a8159aac87
    Add is_ipv6_disabled Thibault Ayanides 2021-02-15 11:58:33 +0100
  • c528d264bc
    Use pam_faillock instead of pam_tally for bullseye Thibault Ayanides 2021-02-15 10:50:22 +0100
  • a0b984af28 add exception Jeremy Denoun 2021-02-11 15:26:08 +0100
  • a49a4b1ea8 Merge branch 'master' of github.com:ovh/debian-cis into fix_msg Jeremy Denoun 2021-02-11 14:30:08 +0100
  • 896d277d95
    fix #46 bug (#47) jeremydenoun 2021-02-11 14:00:18 +0100
  • 3beb1418ff add log details to be more comprehensive Jeremy Denoun 2021-02-11 11:42:03 +0100
  • 6389f094e2 fix #46 bug Jeremy Denoun 2021-02-10 16:10:51 +0100
  • ce6a8bca54 fix incorrect path from ls Jeremy Denoun 2021-02-09 13:48:21 +0100
  • 4615fbcf2b
    Add missing HARDENING_LEVEL Thibault Ayanides 2021-02-08 10:34:00 +0100
  • 6ae05f3fa2
    Add dealing with debian 11 Thibault Ayanides 2021-02-08 13:54:24 +0100
  • db5308f232
    Fix smallest supported deb version Thibault Ayanides 2021-02-08 13:49:19 +0100
  • 5d18e3982e
    Use global var for debian major and distro Thibault Ayanides 2021-02-08 09:36:21 +0100
  • 742cfade0d
    Add 99.99 check that check if distro version is supported Thibault Ayanides 2021-01-22 15:32:00 +0100
  • 39547d97b0
    Regenerate man pages (Github action) thibaultserti 2021-01-22 14:07:44 +0000
  • 33246a2f5f
    Fix typo in README.md Thibault Ayanides 2021-01-22 14:18:25 +0100
  • 743c5d325c
    Rebase Thibault Ayanides 2021-02-08 09:00:58 +0100
  • 8d1127fb86
    FIX: fix debian version func to manage debian11 Thibault Ayanides 2021-01-21 14:50:03 +0100
  • ab76432fe3
    Add workflow for debian11 Thibault Ayanides 2021-01-21 14:34:46 +0100
  • 8e86b7a223
    FIX: fix crontab file not found on debian11 blank Thibault Ayanides 2021-01-21 14:33:32 +0100
  • 6721f53da7
    ADD: add dockerfile for debian11 Thibault Ayanides 2021-01-21 14:09:52 +0100
  • 449c695415 IMP: improve partition detection in container Thibault Ayanides 2021-01-25 14:44:31 +0100
  • 2d6550fb13
    Bump dev-drprasad/delete-tag-and-release from v0.1.2 to v0.1.3 (#41) dependabot[bot] 2021-02-04 16:23:41 +0100
  • 0b6ea0d97e
    IMP: add multiple Improvements jeremydenoun 2021-02-04 16:21:49 +0100
  • 557c46fadb proposal regarding comments Jeremy Denoun 2021-02-04 11:43:41 +0100
  • 52d91231ed
    Bump dev-drprasad/delete-tag-and-release from v0.1.2 to v0.1.3 dependabot[bot] 2021-02-04 07:03:15 +0000
  • 678425dab5 disable test for 3.4.[1234] to be consistent with others Jeremy Denoun 2021-02-02 13:13:03 +0100
  • 9966dadd9e tipc has deps Jeremy Denoun 2021-02-02 13:04:13 +0100
  • 90dfbeff07 Merge branch 'fs_check' of github.com:jeremydenoun/debian-cis into fs_check Jeremy Denoun 2021-02-02 12:56:13 +0100
  • d5ff99ba3e Merge branch 'master' of github.com:ovh/debian-cis into fs_check Jeremy Denoun 2021-02-02 12:55:50 +0100
  • a2db3b14e0 new implementation Jeremy Denoun 2021-02-02 12:55:41 +0100
  • 47bdfd0168 Regenerate man pages (Github action) jeremydenoun 2021-02-01 13:51:30 +0000
  • 5684a2c7d9 fix after discussion (1/2) Jeremy Denoun 2021-02-01 14:49:46 +0100
  • ec9e2addc2 Bump luizm/action-sh-checker from v0.1.10 to v0.1.12 dependabot[bot] 2021-01-29 07:06:03 +0000
  • 6686b99f84 fix shellcheck report Jeremy Denoun 2021-01-29 20:05:47 +0100
  • 742e3cda66 add new kernel module detection (enable & listing) + change way to detect if file system type is disabled + add global IS_CONTAINER variable Jeremy Denoun 2021-01-29 12:02:56 +0100
  • a469d5e1bb
    Bump luizm/action-sh-checker from v0.1.10 to v0.1.12 dependabot[bot] 2021-01-29 07:06:03 +0000
  • 294d1b07d0
    IMP: improve partition detection in container Thibault Ayanides 2021-01-25 14:44:31 +0100
  • ed1baa724e IMP: mark some checks as useless Thibault Ayanides 2021-01-21 11:21:18 +0100
  • bd4ddfc398 ADD(3.4.x): add checks and tests Thibault Ayanides 2021-01-21 11:09:25 +0100
  • 5a72d986ea IMP(3.1-3.x): add comprehensive tests Thibault Ayanides 2021-01-21 11:02:08 +0100
  • c51513e083 IMP(1.8.1.4-6): add comprehensive tests Thibault Ayanides 2021-01-21 10:59:26 +0100
  • 6127f2fe67 IMP(4.2.2.x): improve dealing with default conf Thibault Ayanides 2021-01-20 09:21:08 +0100
  • c127704fbb
    Bump luizm/action-sh-checker from v0.1.10 to v1.1.0 dependabot[bot] 2021-01-25 08:10:25 +0000
  • 6efefa07ac
    Update shellcheck workflow Thibault Serti 2021-01-22 14:45:01 +0100
  • d7cc4bbbfe
    Merge branch 'master' into workflows-shellcheck Thibault Serti 2021-01-22 11:34:38 +0100
  • 37b784663a
    Update shellcheck workflow Thibault Ayanides 2021-01-22 11:21:07 +0100
  • dce926a536
    Add default variable to avoid unbound variable jeremydenoun 2021-01-22 10:02:44 +0100
  • 8290c40816
    Merge branch 'master' into unbound_variable Thibault Serti 2021-01-22 09:58:53 +0100
  • 0edb837f80
    Remove bc dependency jeremydenoun 2021-01-22 09:31:53 +0100
  • 9e80663577 change request implemented Jeremy Denoun 2021-01-22 09:25:03 +0100
  • bade8e75f3 change request implemented Jeremy Denoun 2021-01-22 09:13:08 +0100
  • 494eac0418
    IMP: mark some checks as useless Thibault Ayanides 2021-01-21 11:21:18 +0100
  • c8bac39cde
    ADD(3.4.x): add checks and tests Thibault Ayanides 2021-01-21 11:09:25 +0100
  • d3becde0b9
    IMP(3.1-3.x): add comprehensive tests Thibault Ayanides 2021-01-21 11:02:08 +0100
  • 01aa673b89
    IMP(1.8.1.4-6): add comprehensive tests Thibault Ayanides 2021-01-21 10:59:26 +0100
  • e0e057b8b2
    IMP(4.2.2.x): improve dealing with default conf Thibault Ayanides 2021-01-20 09:21:08 +0100
  • 2602f65539 default variable to avoid unbound variable Jeremy Denoun 2021-01-21 17:04:10 +0100
  • 144540e695 fix lint Jeremy Denoun 2021-01-21 16:53:32 +0100
  • 15d68cdf5d Proposal to remove bc deps Jeremy Denoun 2021-01-21 16:43:57 +0100
  • 1c2e171655
    Fix ovh/debian-cis:#25 (#28) jeremydenoun 2021-01-21 16:01:34 +0100
  • b2e9aa7c71 use fix shfmt version Jeremy Denoun 2021-01-21 15:44:04 +0100
  • 71eddb11ba Merge branch 'ignore_if_not_opensshserver' of github.com:jeremydenoun/debian-cis into ignore_if_not_opensshserver Jeremy Denoun 2021-01-21 15:37:36 +0100
  • b305416f6e Fix ovh/debian-cis:#25 Jeremy Denoun 2021-01-21 15:02:28 +0100
  • 54e3ce03ab indent fix Jeremy Denoun 2021-01-21 15:36:08 +0100
  • 108f3b325d typo Jeremy Denoun 2021-01-21 15:22:24 +0100
  • 13f8b4de1c Fix ovh/debian-cis:#25 Jeremy Denoun 2021-01-21 15:02:28 +0100
  • 4a652a94c6 Bump EndBug/add-and-commit from v6 to v7 dependabot[bot] 2021-01-18 14:48:30 +0000
  • ad27ebae6d
    Bump EndBug/add-and-commit from v6 to v7 dependabot[bot] 2021-01-18 14:48:30 +0000