Skip to content

Commit

Permalink
Add rules to several ubuntu2404 CIS controls
Browse files Browse the repository at this point in the history
  • Loading branch information
mpurg committed Dec 10, 2024
1 parent 0595c98 commit 346a816
Showing 1 changed file with 12 additions and 13 deletions.
25 changes: 12 additions & 13 deletions controls/cis_ubuntu2404.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1759,10 +1759,9 @@ controls:
levels:
- l1_server
- l1_workstation
related_rules:
rules:
- sudo_add_use_pty
status: planned
notes: TODO. Partial/incorrect implementation exists.See related rules. Analogous to ubuntu2204/5.3.2.
status: automated

- id: 5.2.3
title: Ensure sudo log file exists (Automated)
Expand Down Expand Up @@ -1833,8 +1832,9 @@ controls:
levels:
- l1_server
- l1_workstation
status: planned
notes: TODO. Rule does not seem to be implemented, nor does it map to any rules in ubuntu2204 profile.
rules:
- package_pam_pwquality_installed
status: automated

- id: 5.3.2.1
title: Ensure pam_unix module is enabled (Automated)
Expand Down Expand Up @@ -2285,20 +2285,18 @@ controls:
levels:
- l1_server
- l1_workstation
related_rules:
rules:
- journald_compress
status: planned
notes: TODO. Partial/incorrect implementation exists.See related rules. Analogous to ubuntu2204/4.2.1.3.
status: automated

- id: 6.1.2.4
title: Ensure journald Storage is configured (Automated)
levels:
- l1_server
- l1_workstation
related_rules:
rules:
- journald_storage
status: planned
notes: TODO. Partial/incorrect implementation exists.See related rules. Analogous to ubuntu2204/4.2.1.4.
status: automated

- id: 6.1.3.1
title: Ensure rsyslog is installed (Automated)
Expand All @@ -2323,8 +2321,9 @@ controls:
levels:
- l1_server
- l1_workstation
status: planned
notes: TODO. Rule does not seem to be implemented. Analogous to ubuntu2204/4.2.2.3.
rules:
- journald_forward_to_syslog
status: automated

- id: 6.1.3.4
title: Ensure rsyslog log file creation mode is configured (Automated)
Expand Down

0 comments on commit 346a816

Please sign in to comment.