Skip to content

Update Fedora CIS profile #14268

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jan-cerny wants to merge 1 commit into
base: master
Choose a base branch
from
+209 −156
Open

Update Fedora CIS profile #14268

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
354 changes: 199 additions & 155 deletions controls/cis_fedora.yml
View file
Open in desktop

Large diffs are not rendered by default.

1 change: 1 addition & 0 deletions ..._os/guide/auditing/configure_auditd_data_retention/var_auditd_admin_space_left_action.var
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,3 +21,4 @@ options:
cis_rhel8: single|halt
cis_rhel9: single|halt
cis_rhel10: single|halt
cis_fedora: single|halt
1 change: 1 addition & 0 deletions linux_os/guide/auditing/configure_auditd_data_retention/var_auditd_disk_error_action.var
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,7 @@ options:
cis_rhel8: syslog|single|halt
cis_rhel9: syslog|single|halt
cis_rhel10: syslog|single|halt
cis_fedora: syslog|single|halt
cis_ubuntu2204: syslog|single|halt
cis_ubuntu2404: syslog|single|halt
cis_debian12: syslog|single|halt
1 change: 1 addition & 0 deletions linux_os/guide/auditing/configure_auditd_data_retention/var_auditd_disk_full_action.var
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,7 @@ options:
cis_rhel8: syslog|single|halt
cis_rhel9: halt|single
cis_rhel10: halt|single
cis_fedora: halt|single
cis_ubuntu2204: halt|single
cis_ubuntu2404: halt|single
cis_debian12: halt|single
1 change: 1 addition & 0 deletions linux_os/guide/auditing/configure_auditd_data_retention/var_auditd_space_left_action.var
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,3 +21,4 @@ options:
cis_rhel8: email|exec|single|halt
cis_rhel9: email|exec|single|halt
cis_rhel10: email|exec|single|halt
cis_fedora: email|exec|single|halt
1 change: 1 addition & 0 deletions linux_os/guide/system/accounts/accounts-pam/var_password_hashing_algorithm.var
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,4 @@ options:
cis_ubuntu2204: SHA512|YESCRYPT
cis_ubuntu2404: SHA512|YESCRYPT
cis_rhel10: YESCRYPT|SHA512
cis_fedora: YESCRYPT|SHA512
2 changes: 1 addition & 1 deletion linux_os/guide/system/software/integrity/crypto/configure_custom_crypto_policy_cis/rule.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ title: Implement Custom Crypto Policy Modules for CIS Benchmark
"value": "-*-128*"
},
] %}}
{{% elif product == "rhel10" %}}
{{% elif product == "rhel10" or product == "fedora" %}}
{{% set base_policy = "DEFAULT" %}}
{{% set sub_policies = [
{
Expand Down
4 changes: 4 additions & 0 deletions shared/applicability/package.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,11 @@ args:
chrony:
pkgname: chrony
dnf:
{{% if product == "fedora" %}}
pkgname: dnf5
{{% else %}}
pkgname: dnf
{{% endif %}}
firewalld:
pkgname: firewalld
gdm:
Expand Down
Loading