mirror of
https://github.com/ovh/debian-cis.git
synced 2025-08-10 01:21:53 +02:00
80b73b73b9
* adding new scripts for debian12
- "users_homedir_is_configured.sh" is a concatenation of different existing scripts:
- [users_homedir_exist.sh](https://github.com/ovh/debian-cis/blob/master/bin/hardening/users_homedir_exist.sh)
- [users_homedir_ownership.sh](https://github.com/ovh/debian-cis/blob/master/bin/hardening/users_homedir_ownership.sh)
- [check_user_dir_perm.sh](https://github.com/ovh/debian-cis/blob/master/bin/hardening/check_user_dir_perm.sh)
And so is its test
It will be mapped as 7.2.9 for debian 12
- The following scripts are a split from [5.3.1_enable_pwquality.sh](https://github.com/ovh/debian-cis/blob/master/bin/hardening/enable_pwquality.sh):
- enable_libpam_pwquality.sh -> will be mapped as 5.3.2.3
- install_libpam_pwquality.sh -> will be mapped as 5.3.1.3
- password_complexity.sh -> will be mapped as 5.3.3.2.3
- password_min_length.sh -> will be mapped as 5.3.3.2.2
The others are scripts are new.
They will be mapped as follow for debian 12 CIS :
- apt_gpg_is_configured.sh -> 1.2.1.1
- dev_shm_separate_partition.sh -> 1.2.2.1
- install_iptables.sh -> 4.3.1.1
- install_nftables.sh -> 4.2.1
- password_consecutive_characters.sh -> 5.3.3.2.4
- password_max_sequential_characters.sh -> 5.3.3.2.5
* chore: rename some scripts
- password configuration related scripts : ensure they start as "password_" like others checks
---------
Co-authored-by: Damien Cavagnini <damien.cavagnini@corp.ovh.com>
Here, we'll add some folders to represent a specific CIS version to use. Each folder will contains links to adequat scripts
Ex: debian12/ 1.1.1.1_disable_cramfs.sh ->../../bin/hardening/disable_cramfs.sh 1.1.1.2_disable_freevxfs.sh ->../../bin/hardening/disable_freevxfs.sh etc.