Skip to content

Commit

Permalink
feat(cis_baseline): implement placeholders for 1.3 as AIDE is broken
Browse files Browse the repository at this point in the history
  • Loading branch information
karras committed Jul 8, 2023
1 parent 24c5bcb commit 7aa4655
Show file tree
Hide file tree
Showing 4 changed files with 28 additions and 0 deletions.
5 changes: 5 additions & 0 deletions roles/cis_baseline/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,11 @@ Manages CIS security baseline settings for clients.

* Arch Linux: CIS Distribution Independent Linux" (`v2.0.0` - `07-06-2019`)

Due to missing packages or capabilities related to Arch Linux, the following
chapters and controls have not yet been implemented:

* 1.3 Filesystem Integrity Checking (missing and broken AIDE packages)

## Example Playbook

As this role is tested via Molecule one can use [that
Expand Down
1 change: 1 addition & 0 deletions roles/cis_baseline/defaults/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@
cis_baseline_sections:
- 1_1_filesystem
- 1_2_software_updates
- 1_3_filesystem_integrity # Not implemented yet

# List of specific CIS rules to ignore
cis_baseline_ignored_rules: []
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
---

# 1.3.1 Ensure AIDE is installed (Scored)
#
# AIDE is currently only available in the AUR, and not building correctly. Thus
# this control will be implemented at a later point in time.

# 1.3.2 Ensure filesystem integrity is regularly checked (Scored)
#
# AIDE is currently only available in the AUR, and not building correctly. Thus
# this control will be implemented at a later point in time.
11 changes: 11 additions & 0 deletions roles/cis_baseline/tasks/1_3_filesystem_integrity.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
---

# 1.3.1 Ensure AIDE is installed (Scored)
#
# AIDE is currently only available in the AUR, and not building correctly. Thus
# this control will be implemented at a later point in time.

# 1.3.2 Ensure filesystem integrity is regularly checked (Scored)
#
# AIDE is currently only available in the AUR, and not building correctly. Thus
# this control will be implemented at a later point in time.

0 comments on commit 7aa4655

Please sign in to comment.