mirror of
https://github.com/ovh/debian-cis.git
synced 2025-09-04 21:48:23 +02:00
9bd170438c
* fix ssh related tests As letting sshd active will mess with others scripts later * feat: add debian12 scripts - nftables_loopback_is_configured.sh -> 4.2.6 - nftables_established_connections.sh -> 4.2.7 - iptables_flushed_with_nftables.sh -> 4.2.3 - ufw_loopback_is_configured.sh -> 4.1.4 - ufw_outbound_connection.sh -> 4.1.5 - ufw_default_deny.sh -> 4.1.7 - ufw_rules_them_all.sh -> 4.1.6 --------- Co-authored-by: damien cavagnini <damien.cavagnini@corp.ovh.com>
36 lines
1.4 KiB
Plaintext
36 lines
1.4 KiB
Plaintext
Cmnd_Alias SCL_CMD = /bin/grep ,\
|
|
/bin/zgrep,\
|
|
/bin/cat,\
|
|
/usr/bin/stat,\
|
|
/usr/bin/getent,\
|
|
/usr/bin/[,\
|
|
/usr/bin/test,\
|
|
/bin/ls,\
|
|
/usr/bin/find,\
|
|
! /usr/bin/find *-exec*, \
|
|
! /usr/bin/find *-delete*,\
|
|
/usr/bin/apt-get update -y,\
|
|
/usr/bin/apt-get upgrade -s,\
|
|
/usr/bin/cut,\
|
|
/sbin/iptables -nL,\
|
|
/sbin/iptables -nL *,\
|
|
/sbin/iptables -S *,\
|
|
/sbin/sysctl net.*,\
|
|
/sbin/sysctl fs.*,\
|
|
/sbin/sysctl kernel.*,\
|
|
/sbin/sysctl -a,\
|
|
/bin/dmesg "",\
|
|
/bin/netstat,\
|
|
/usr/sbin/lsmod,\
|
|
/sbin/lsmod,\
|
|
/sbin/modprobe,\
|
|
/usr/sbin/modprobe -n -v*,\
|
|
/usr/sbin/apparmor_status,\
|
|
/usr/bin/ss *,\
|
|
/bin/ss *,\
|
|
/usr/bin/pgrep *,\
|
|
/usr/sbin/nft list *,\
|
|
/usr/sbin/ufw status *
|
|
|
|
cisharden ALL = (root) NOPASSWD: SCL_CMD
|