Dan Brodjieski
cd8a084672
refactor[rules]: tweaks for iOS support
2023-08-31 15:15:36 -04:00
Allen Golbig
7a6f934988
updated rules for ios
2023-08-31 09:39:19 -04:00
Allen Golbig
36fafae033
Merge branch 'dev_ventura_cis' into ventura
2023-07-26 10:10:31 -04:00
Allen Golbig
cd35ddd35d
updates for 1.1.0
2023-07-26 06:44:23 -04:00
Allen Golbig
a026c12eaf
fix[rule] world writable system folder
...
Fixed os_world_writable_system_folder_configure, downloadDir
2023-07-25 16:05:55 -04:00
Allen Golbig
a8c270306e
fixed typos
2023-07-20 09:02:52 -04:00
Bob Gendler
df39606a2b
recfactor[rule] Mispelling
...
Issue #270
2023-06-26 10:42:58 -04:00
Bob Gendler
d00bb1a4c3
refactor[rules/scripts] Added CCEs, removed tags
...
Added try except blocks in generate_scap to prevent crashes
Added CCEs
Removed double tags
2023-06-22 14:52:57 -04:00
Bob Gendler
7f549f7280
removed spaces
2023-06-22 13:10:14 -04:00
Bob Gendler
6105b6e144
tag issue resolved
2023-06-22 13:07:43 -04:00
Bob Gendler
85e2d68fe4
[refactor] rules, baselines, includes
...
Added cnssi and disa stig to mscp-data.yaml
Generated updated baseline files
Fixed merge issue with audit_files_owner_configure
2023-06-22 13:01:59 -04:00
Bob Gendler
e02209c0e6
Removed old cnssi tag
2023-06-22 12:51:58 -04:00
Bob Gendler
9fccb44c5d
Merge branch 'dev_ventura_stig' into ventura
2023-06-22 12:47:18 -04:00
Bob Gendler
fc9d45b03c
Merge branch 'dev_ventura_cmmc' into ventura
2023-06-22 12:23:41 -04:00
Bob Gendler
e5cc08a9cd
Merge branch 'dev_ventura_cnssi' into ventura
2023-06-22 11:21:55 -04:00
Bob Gendler
006a27574a
updated grep path
2023-06-20 12:12:06 -04:00
Bob Gendler
6d16dcf1d2
Merge branch 'dev_ventura_issue201' into ventura
2023-06-20 12:07:04 -04:00
Bob Gendler
201e16860c
Merge branch 'dev_ventura_issue258' into ventura
2023-06-20 11:52:30 -04:00
Bob Gendler
717e9bb1ac
Fixed tag issue
2023-06-20 11:51:47 -04:00
Bob Gendler
b7ecd573f2
Merge branch 'dev_ventura_issue268' into ventura
2023-06-20 11:44:14 -04:00
Bob Gendler
be424f5d74
refactor[rules] New firewall check/fix
...
Added new check/fix for ALF due to discovery of
being able to override the config profile
Issue #268
2023-06-20 11:33:26 -04:00
mahlmanj
7a6b7a207c
Updating CIS supplemental.
2023-06-16 13:42:32 -04:00
mahlmanj
1415612ca0
Fixes for issue #219
2023-06-16 12:50:11 -04:00
Dan Brodjieski
c241d42b81
fix[rules]: updated fixes for auditd rules
...
Removed the dynamic check for the audit files path
Issue #269
2023-06-15 10:13:57 -04:00
Dan Brodjieski
a6fbad2241
refactor[rule]: updated baseline for STIG
2023-06-13 10:19:12 -04:00
Dan Brodjieski
75177ce283
refactor[rule]: added NOTE about usage
2023-06-13 10:14:42 -04:00
Dan Brodjieski
6ed02f7cd7
refactor[rule]: removed STIG references
2023-06-12 14:10:13 -04:00
Dan Brodjieski
c384f33ecd
refactor[rule]: added rule for default home dirs
...
Moving this rule to a manual check for the STIG
2023-06-12 14:08:41 -04:00
Dan Brodjieski
26b3d206d4
refactor[rule]: moving rule to STIG
2023-06-12 13:58:24 -04:00
Dan Brodjieski
a8e621934d
refactor[rule]: added NIST references
2023-06-12 13:56:26 -04:00
Bob Gendler
5a05321a36
refactor[rules] Added missing tag
...
Added missing STIG tag
2023-06-12 11:40:37 -04:00
Bob Gendler
0f8718ea0a
refactor[rules] Missing ODV value
...
Added missing STIG ODV value
2023-06-12 11:40:09 -04:00
Bob Gendler
5d89d971b2
refactor[rules] Added text code block
...
Text code block allows policy banners with return
characters to display properly.
2023-06-12 11:39:14 -04:00
Dan Brodjieski
6fe51bc8f7
fix[rule]: updated permission check
...
Changed permission check to allow for 700 or 711 on users' home folders
and subfolders
Issue #258
2023-05-30 12:21:29 -04:00
Allen Golbig
84c83b9bc1
fix[rule] closed the fix section
...
Added ---- to close the fix section of the rule
2023-05-30 09:37:49 -04:00
Dan Brodjieski
2f27cb2071
fix[rule]: adjusted check to match others
2023-05-26 14:40:30 -04:00
Dan Brodjieski
c62c4c9c76
fix[rules]: update SSH fix to prevent dupes
2023-05-26 14:33:28 -04:00
Dan Brodjieski
eca5fcc7dd
fix[rule]: Clear out .conf to prevent dupes
...
Our fix was appending configuration settings to the SSH conf file.
To correct this, removing the file before writing to it ensures a
clean state.
Issue #201
2023-05-26 13:28:22 -04:00
Bob Gendler
abdf3f3cf3
Merge branch 'dev_ventura_issue263' into ventura
2023-05-26 11:59:00 -04:00
Bob Gendler
11194dc799
Merge branch 'dev_ventura_issue257' into ventura
2023-05-26 11:48:16 -04:00
Allen Golbig
9e29b7c86c
refactor[rules] removed level 3 from cmmc
...
Removed lvl 3 from cmmc
2023-05-25 16:25:41 -04:00
Bob Gendler
9b22c671f1
refactor[rules] check update
...
Updated check in os_policy_banner_ssh_configure
Issue #263
2023-05-25 14:14:18 -04:00
Bob Gendler
59f6113560
refactor[rules] Added missing required rule files
...
Added required payload to
system_settings_firewall_stealth_mode_enable and auth_smartcard_enforce
Added missing DISA STIG references to auth_smartcard_allow and
system_settings_firewall_enable
2023-05-25 09:45:31 -04:00
Bob Gendler
cdfe0ecd34
refactor[supplemental] Updated supplemental_stig
...
Finished
2023-05-23 12:24:20 -04:00
Bob Gendler
92cc148d26
refactor[rules]sshd rule updates
...
Changed discussion to describe what the setting
properly is doing
2023-05-23 12:23:37 -04:00
Bob Gendler
dd40ffa6f2
refactor[baseline] DISA-STIG Baseline adjusted
...
Added supplemental_stig
Removed supplemental_controls and pf_firewall
2023-05-23 12:22:49 -04:00
Allen Golbig
363c0a5279
[refactor] home folder secure
...
Refactoring check/fix for home folder secure
issue #258
2023-05-23 11:49:38 -04:00
Allen Golbig
55ffd7d410
fix[rules] updates for cis v1.1.0
...
updates for cis v1.1.0
2023-05-22 20:32:56 -04:00
Dan Brodjieski
fa9d289ff6
refactor[rule]: Update discussion for SSHD
...
Updated the discussions for ClientAliveCountMax
and ClientAliveInterval to better clarify the intent of the rule.
Issue #259
2023-05-17 12:28:40 -04:00
Bob Gendler
8d6c8d5e06
Updated discussion blurb
2023-05-17 10:14:00 -04:00
