UBUNTU20 CIS Versions Save

Ansible role for Ubuntu 2004 CIS Baseline

2.2.1

1 month ago

CIS - V 2.0.1 - 27 Jun 2023

Remediate

Issues closed and PRs merged - What's changed Pre-commit updates Many improvements to different controls

AUDIT

  • Audit only option added
  • New goss binary now supported
  • Audit variables tidied and moved

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/UBUNTU20-CIS/compare/2.2.0...2.2.1

2.1.1

7 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/UBUNTU20-CIS/compare/V1.1.3...2.1.1

2.2.0

7 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/UBUNTU20-CIS/compare/V1.1.3...2.1.1

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/UBUNTU20-CIS/compare/2.1.1...2.2.0

2.1

7 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/UBUNTU20-CIS/compare/2.0...2.1

V1.1.3

1 year ago
  • lint files updated
  • ansible version updated
  • Lots of lint and standardisation changes
  • fqcn
  • Assertions for root and grub passwords
  • Import tasks to allow tags to be used
  • Warnings made standard
  • warn count feature added
  • workflow updates
  • wireless interface discovery
  • idempotency checks and updates

reboot variable changed from ubtu20_skip_reboot to skip_reboot (still default true)

Remediate portion

Issues and PRs address

  • #1 set bootloader pwd - Allowed unrestricted by default but set new variables

    • Added extra variable options ubtu20cis_set_grub_password and ubtu20cis_set_root_password (defaults true)

  • #2 Ensure locks for failed attempts

  • #3 root path integrity

  • thanks to @vbotka

    • #63 parse_etc_password

  • thanks to @makefu

    • #67 UFW incoming firewall ports (optional)

  • thanks to @CFoltin

    • #68 logrotate alignment
    • #69 stop rule overwrite UFW

  • thanks to @hackery

    • #70 TMOUT stops being repeated

Many improvements on multiple controls Remediate and audit version now match. When using remediate will pull in latest version of audit for that release.

Audit

  • updated goss version used
  • aligned new variables with audit
  • audit path used now default to /opt from /var/tmp

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/UBUNTU20-CIS/compare/v1.1.2...V1.1.3

v1.1.2

1 year ago

What's Changed

New Contributors

Full Changelog: https://github.com/ansible-lockdown/UBUNTU20-CIS/compare/1.1.1...v1.1.2

based upon CIS 1.1.0

  • lint files updated
  • ansible version updated
  • Lots of lint and standardisation changes
  • fqcn
  • Assertions for root and grub passwords
  • Import tasks to allow tags to be used
  • Warnings made standard
  • warn count feature added
  • workflow updates
  • wireless interface discovery
  • idempotency checks and updates

reboot variable changed from ubtu20_skip_reboot to skip_reboot (still default true)

Remediate portion

Issues and PRs address

  • #1 set bootloader pwd - Allowed unrestricted by default but set new variables

    • Added extra variable options ubtu20cis_set_grub_password and ubtu20cis_set_root_password (defaults true)

  • #2 Ensure locks for failed attempts

  • #3 root path integrity

  • thanks to @vbotka

    • #63 parse_etc_password

  • thanks to @makefu

    • #67 UFW incoming firewall ports (optional)

  • thanks to @CFoltin

    • #68 logrotate alignment
    • #69 stop rule overwrite UFW

  • thanks to @hackery

    • #70 TMOUT stops being repeated

Many improvements on multiple controls Remediate and audit version now match. When using remediate will pull in latest version of audit for that release.

Audit

  • updated goss version used
  • aligned new variables with audit
  • audit path used now default to /opt from /var/tmp

1.1.1

2 years ago

CIS Version: 1.1.0 (03-31-21)

Issue Fixes: #20 - Typo in default/main.yml file

Enhancements:

  • Added Issue templates
  • Add PR template

1.1.0

3 years ago

CIS Version: 1.1.0 (03-31-21)

Enhancements:

  • Updates for version 1.1.0 of CIS benchmarks
  • Gather more subsets to avoid undefined ansible_* variables
  • Run information gathering commands even in check mode

v1.0.1

3 years ago

Changes:

  • README.md updates
  • Added CONTRIBUTING.rst

CIS Version: 1.0.0

v1.0.0

3 years ago

Initial Ubuntu 20 CIS role