Bob Gendler
9271106cd6
refactor[rules] Converted 171r2 to 171r3
...
Added 171r3 to some rules
Converted 171r2 to r3 in most rules
2024-09-01 21:28:47 -04:00
Allen Golbig
d1de3c0665
removed cces and stigs
2024-07-15 19:52:43 -04:00
Allen Golbig
701e4d6b6a
dev_sequoia
2024-07-15 18:01:42 -04:00
Bob Gendler
2ab099bfcd
Dev sonoma issue356 ( #367 )
...
* chore[rules]: updated STIG tags
Removed the stig tag from rules that weren't in the stig.
Added 'srg' tag to rules that had SRG references, but not in stig
Issue #356
* chore[baseline]: updated STIG baseline
* chore[references]: updated CCI and SRG refs
Updated severity where needed too
* fix[rule]: yaml syntax for CCI
* fix[rules]: added missing STIG ODVs
---------
Co-authored-by: Dan Brodjieski <daniel.brodjieski@nasa.gov >
Co-authored-by: Dan Brodjieski <dbrodjieski@icloud.com >
2024-02-26 15:50:02 -05:00
Dan Brodjieski
701ed9bec0
chore[rules]: updates from published STIG
...
added STIG references and updated baselines to support latest release from DISA
2024-01-24 08:16:00 -05:00
Bob Gendler
2a41fdb23d
changed newstig to stig tag
2023-10-05 13:45:19 -04:00
Bob Gendler
28ef4c7393
Merge branch 'sonoma' into dev_sonoma_disa
2023-09-29 11:20:42 -04:00
Bob Gendler
6f27ac219c
removed touch to blank audit_control
2023-09-20 20:35:28 -04:00
Bob Gendler
c4d28b1350
refactor[rules] auditd check/fix update
2023-09-20 16:09:20 -04:00
Bob Gendler
894f99dc83
refactor[rules] audit_auditd_enabled fix
...
Updated auditd fix to no longer require a restart to start the
auditd service.
2023-09-20 16:02:28 -04:00
Bob Gendler
06e9c53a07
cnssi-1253 tags added
2023-09-20 14:37:32 -04:00
Dan Brodjieski
37b00778fc
Merge branch 'dev_sonoma' into dev_sonoma_disa
...
Attempt to resync latest Sonoma changes
2023-09-14 15:18:30 -04:00
Dan Brodjieski
5acbdbd21e
chore: clean up extraneous trailing whitespace
2023-09-14 14:21:06 -04:00
Bob Gendler
e5fb336bdb
refactor[rules] CCEs added
...
Added NIST issued CCEs to all rule files
2023-09-09 14:43:51 -04:00
Bob Gendler
4e003fb7c1
refactor[rules] removed newstig tag
...
Removed SRGs and newstig tag
2023-09-01 10:39:17 -04:00
Dan Brodjieski
5dbf9ee3c3
fix[rules]: yaml cleanup from merge
2023-08-31 14:53:11 -04:00
Dan Brodjieski
861d14815b
refactor[stig]: merged SRGs from DISA
...
Rewrote all the rule yaml files to have correct SRG references.
Added scripts to work with new STIG workflows.
2023-08-31 11:37:33 -04:00
Bob Gendler
206884b723
removed stig tag
2023-08-01 14:21:15 -04:00
Bob Gendler
a3ce45a986
refactor[rules] removed CCE and disa stig controls
2023-08-01 13:50:01 -04:00
Allen Golbig
c396f18b24
feat[baseline] dev_sonoma
...
dev_sonoma
2023-07-13 22:17:34 -04:00
Bob Gendler
6105b6e144
tag issue resolved
2023-06-22 13:07:43 -04:00
Bob Gendler
85e2d68fe4
[refactor] rules, baselines, includes
...
Added cnssi and disa stig to mscp-data.yaml
Generated updated baseline files
Fixed merge issue with audit_files_owner_configure
2023-06-22 13:01:59 -04:00
Bob Gendler
e02209c0e6
Removed old cnssi tag
2023-06-22 12:51:58 -04:00
Bob Gendler
9fccb44c5d
Merge branch 'dev_ventura_stig' into ventura
2023-06-22 12:47:18 -04:00
Bob Gendler
fc9d45b03c
Merge branch 'dev_ventura_cmmc' into ventura
2023-06-22 12:23:41 -04:00
Bob Gendler
e5cc08a9cd
Merge branch 'dev_ventura_cnssi' into ventura
2023-06-22 11:21:55 -04:00
Dan Brodjieski
c241d42b81
fix[rules]: updated fixes for auditd rules
...
Removed the dynamic check for the audit files path
Issue #269
2023-06-15 10:13:57 -04:00
Allen Golbig
9e29b7c86c
refactor[rules] removed level 3 from cmmc
...
Removed lvl 3 from cmmc
2023-05-25 16:25:41 -04:00
Bob Gendler
827a2c352d
cnssi tags added
2023-05-04 13:53:17 -04:00
Bob Gendler
f0bc8666c9
refactor[rules/baselines] DISA STIG
...
Re-add DISA STIG branch
* New rules added
* STIG references and tags added
* Whitespace clean up
* DISA-STIG baseline added
2023-05-04 13:43:18 -04:00
Bob Gendler
fa6711513e
Merge branch 'ventura' into dev_ventura_cmmc
2023-04-26 09:55:16 -04:00
Dan Brodjieski
0f5f5b697e
update[baselines]: removed cnssi tags
...
removing until cnssi updates are finalized
2023-04-25 11:56:23 -04:00
Bob Gendler
7f636f2da9
refactor[rules] Updated full path for awk
2023-02-10 10:38:42 -05:00
n4l5u0r
7abf37bba1
FIX: Adding LESS PERMISSIVE control option ( #216 )
...
* Update 800-171.yaml
* Fixed generate_mapping.py for authors
* v8 to controls v8 fix for excel generation
* Date for Monterey Revision 2 Updated
* Update README.adoc
* Adding LESS PERMISSIVE control
On ventura the default permissions on `/etc/security/audit_control` are `-r--------` resulting in failed audit.
Co-authored-by: Bob Gendler <robert.gendler@nist.gov >
Co-authored-by: Dan Brodjieski <brodjieski@gmail.com >
2023-01-25 14:46:50 -05:00
mahlmanj
7efee13b82
Here we go! First rule push.
2022-12-19 11:43:52 -05:00
Allen Golbig
07b096c8a0
fix[rules] updated cis refs
...
Updated refs and fixed various things
Issue #191
2022-11-04 08:49:19 -04:00
Dan Brodjieski
fead101e4b
refactor[rules]: removed STIG referencing
...
Removed references to the STIG until it is released.
2022-10-18 18:57:37 -04:00
Bob Gendler
9aa5f221ef
refactor [rules] Updated CIS Benchmark Numbers
...
Updated CIS Benchmark Numbers to match 4 - Network Configurations
2022-10-18 12:15:38 -04:00
Bob Gendler
9e53ed64ba
refactor [rules] Removed STIG tags and ODV
...
Removed stig baseline file
Removed stig tag from rules
Removed stig odv from rules
Removed old way of hiding and disabling system preference panes
2022-10-18 11:07:54 -04:00
Bob Gendler
e4ab4945ec
refactor[rules/baselines]cis updates
...
Added cis_lvl2,cisv8 to additional audit rules
Updated cisv8 baseline and cis_lvl2 baseline
2022-09-22 14:29:40 -04:00
Bob Gendler
ccb6b0400c
refactor[rules] Reassigned and removed rule
...
Assigned cislvl1 and cislvl2 to audit_flags_fm_failed_configure
Removed audit_flags_configure
2022-09-22 14:03:05 -04:00
Bob Gendler
624b01e8c5
CCEs added
2022-08-29 16:17:11 -04:00
Bob Gendler
dd53f7a523
CCE changed to N/A
2022-07-14 20:58:55 -04:00
Bob Gendler
08065223e9
or changed to OR
2022-07-14 20:32:55 -04:00
Bob Gendler
25d7facec3
macos changed from 12.0 to 13.0
2022-07-12 17:25:08 -04:00
Dan Brodjieski
f5bfcdb2c1
default ODVs work better
2022-05-26 13:14:51 -04:00
Dan Brodjieski
d549f9b55e
Merge branch 'monterey' into dev_mont_odv
2022-05-05 08:00:50 -04:00
Allen Golbig
41c16df94b
removed test and finished odvs
2022-04-15 16:57:03 -04:00
Allen Golbig
0e53b4c445
odv defaults
2022-04-15 11:26:18 -04:00
Allen Golbig
4b5467984d
added more odv refs
2022-03-30 16:42:16 -04:00
