From 346a81682ffa03803713041af088930a471fcf7a Mon Sep 17 00:00:00 2001 From: Miha Purg Date: Thu, 5 Dec 2024 13:57:26 +0100 Subject: [PATCH] Add rules to several ubuntu2404 CIS controls --- controls/cis_ubuntu2404.yml | 25 ++++++++++++------------- 1 file changed, 12 insertions(+), 13 deletions(-) diff --git a/controls/cis_ubuntu2404.yml b/controls/cis_ubuntu2404.yml index 765a00936d6..8e50c7d78ce 100644 --- a/controls/cis_ubuntu2404.yml +++ b/controls/cis_ubuntu2404.yml @@ -1759,10 +1759,9 @@ controls: levels: - l1_server - l1_workstation - related_rules: + rules: - sudo_add_use_pty - status: planned - notes: TODO. Partial/incorrect implementation exists.See related rules. Analogous to ubuntu2204/5.3.2. + status: automated - id: 5.2.3 title: Ensure sudo log file exists (Automated) @@ -1833,8 +1832,9 @@ controls: levels: - l1_server - l1_workstation - status: planned - notes: TODO. Rule does not seem to be implemented, nor does it map to any rules in ubuntu2204 profile. + rules: + - package_pam_pwquality_installed + status: automated - id: 5.3.2.1 title: Ensure pam_unix module is enabled (Automated) @@ -2285,20 +2285,18 @@ controls: levels: - l1_server - l1_workstation - related_rules: + rules: - journald_compress - status: planned - notes: TODO. Partial/incorrect implementation exists.See related rules. Analogous to ubuntu2204/4.2.1.3. + status: automated - id: 6.1.2.4 title: Ensure journald Storage is configured (Automated) levels: - l1_server - l1_workstation - related_rules: + rules: - journald_storage - status: planned - notes: TODO. Partial/incorrect implementation exists.See related rules. Analogous to ubuntu2204/4.2.1.4. + status: automated - id: 6.1.3.1 title: Ensure rsyslog is installed (Automated) @@ -2323,8 +2321,9 @@ controls: levels: - l1_server - l1_workstation - status: planned - notes: TODO. Rule does not seem to be implemented. Analogous to ubuntu2204/4.2.2.3. + rules: + - journald_forward_to_syslog + status: automated - id: 6.1.3.4 title: Ensure rsyslog log file creation mode is configured (Automated)