Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

STIG v3r10 release #421

Merged
merged 51 commits into from
Mar 2, 2023
Merged

STIG v3r10 release #421

merged 51 commits into from
Mar 2, 2023

Conversation

uk-bolly
Copy link
Member

Overall Review of Changes:
Adoption of V3R10 Jan 2023

  • Update to V3R10 - Jan 2023
    All controls have rules updated

    • cat_1

      • 010010
      • 010290

    • cat 2

      • 010060
      • 010062
      • 010070
      • 010081
      • 010082
      • 010090 Added back in for screen pkgs to be installed
      • 010100
      • 010101
      • 010110
      • 010199 - new control
      • 010200
      • 010270
      • 010320
      • 010330
      • 010342 - updated grep command to grep -E
      • 020029 - added notify and updated rule
      • 020030 - updated mail path in cron job
      • 020040
      • 020650
      • 021620
      • 040201
      • 040420
      • 040470 - conditional added only pre 7.4
      • 040610
      • 040611
      • 040612
      • 040620
      • 040630
      • 040640
      • 040641
      • 040650
      • 040660
      • 040712 - new control ssh KEX
      • 040740
      • 040830

  • cat 3

    • 010375 - new control
    • 021600
    • 021610

Issue Fixes:
#405
#412
#415
Enhancements:

Lint work
FQCN
Testing
workflow updates
audit version alignment
README

How has this been tested?:
Manually with audit enabled
pipeline

@uk-bolly
#405 updated regex thanks to @JosephHoffman
8a064da 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated msg for bootloader
f151c43 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
made auditd process a variable
e02ca70 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Add version updates
ccec453 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated rule IDs added 010090
967e0ee 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
ruleid 010010
d9d09f9 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Add control 010199
09647cd 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
new rule 010375
e05dc37 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
rule no. updates
0224621 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
20029 - aide notify added
62b8f05 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
20030/20040 update
09d8c98 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated rule_ids
c0dc2c6 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
ruleID updates
71405e4 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
ruleID and 040470- conditional pre 7.4
cfd2824 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
control 40712 added
b73a1e2 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated
aeb82df 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated workflows
51b62b4 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
fix typo
3246513 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
fix typo
efed8ed 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated goss version
6fed141 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
improved handler logic
bcfa72a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated control
e5b55e6 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
audit alignment
cd32e5b 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
changed audit git release to match branch names
d5eae78 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
revert change
b3b4f09 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
fix typo
f089c76 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
removed become statement
84f7594 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated 10260 changed_when
5fd0606 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated Ansible version
bc515f4 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
removed files no loner used
87e9298 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
added update galaxy workflow
ce964f0 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated
1cf2c77 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
lint
2027e1f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
moved to use default audit_git version
4629433 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
fqcn lint
2654fb6 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
FQCN lint
2940470 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
FQCN lint
0691198 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
FQCN and shell/command updates
ff0ba12 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
FQCN
376d23e 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
update audit example
36e932c 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
updated
e733fcd 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
skip password change
fcfb58f 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
added dummy bootloader passwd
bd7b0d2 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Tidy up warning standard
a02f7e3 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Standard PRELIM
871987a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
removed good new statements
43218e6 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
Added warning to manual messages
fa8ea6e 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
lineinfile uses path and option ordering
df0c75b 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
lineinfile path and ordering
b66317a 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
warning update
e9365d7 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
@uk-bolly
removed file not required
eadd7e1 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
georgenalen
georgenalen approved these changes Mar 2, 2023
View reviewed changes
Copy link
Contributor

@georgenalen georgenalen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks Good!

@uk-bolly uk-bolly merged commit 48eddda into devel Mar 2, 2023
@uk-bolly uk-bolly deleted the stig_v3r10 branch March 2, 2023 13:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@georgenalen georgenalen georgenalen approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@uk-bolly @georgenalen