Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

License and issue262 #263

Merged
merged 3 commits into from
Dec 4, 2024
Merged

License and issue262 #263

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
12432ee
updated 1.5.2 regexp as per #262
uk-bolly Dec 4, 2024
8aef8f7
updated Copyright line
uk-bolly Dec 4, 2024
33969e2
Updated company naming
uk-bolly Dec 4, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion LICENSE
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
MIT License

Copyright (c) 2023 Mindpoint Group / Lockdown Enterprise / Lockdown Enterprise Releases
Copyright (c) 2025 Mindpoint Group - A Tyto Athene Company / Ansible Lockdown

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
Expand Down
2 changes: 1 addition & 1 deletion tasks/section_1/cis_1.5.x.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
- name: "1.5.2 | PATCH | Ensure core dump backtraces are disabled"
ansible.builtin.lineinfile:
path: /etc/systemd/coredump.conf
regexp: '^ProcessSizeMax\s*=\s*.*[1-9]$'
regexp: '^ProcessSizeMax\s*=\s*.*[1-9].*'
line: 'ProcessSizeMax=0'
when:
- rhel9cis_rule_1_5_2
Expand Down
2 changes: 1 addition & 1 deletion templates/audit/98_auditd_exception.rules.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# provided by Mindpoint Group - A Tyto Athene Company
### YOUR CHANGES WILL BE LOST!

# This file contains users whose actions are not logged by auditd
Expand Down
2 changes: 1 addition & 1 deletion templates/audit/99_auditd.rules.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# provided by Mindpoint Group - A Tyto Athene Company
### YOUR CHANGES WILL BE LOST!

# This template will set all of the auditd configurations via a handler in the role in one task instead of individually
Expand Down
2 changes: 1 addition & 1 deletion templates/etc/cron.d/aide.cron.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# Run AIDE integrity check
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# provided by Mindpoint Group - A Tyto Athene Company
### YOUR CHANGES WILL BE LOST!
# CIS 1.3.2

Expand Down
2 changes: 1 addition & 1 deletion templates/etc/dconf/db/00-automount_lock.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# provided by Mindpoint Group - A Tyto Athene Company

# Lock desktop media-handling automount setting
/org/gnome/desktop/media-handling/automount
Expand Down
2 changes: 1 addition & 1 deletion templates/etc/dconf/db/00-autorun_lock.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# provided by Mindpoint Group - A Tyto Athene Company

# Lock desktop media-handling settings
/org/gnome/desktop/media-handling/autorun-never
2 changes: 1 addition & 1 deletion templates/etc/dconf/db/00-media-automount.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# provided by Mindpoint Group - A Tyto Athene Company

[org/gnome/desktop/media-handling]
automount=false
Expand Down
2 changes: 1 addition & 1 deletion templates/etc/dconf/db/00-media-autorun.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# provided by Mindpoint Group - A Tyto Athene Company

[org/gnome/desktop/media-handling]
autorun-never=true
2 changes: 1 addition & 1 deletion templates/etc/dconf/db/00-screensaver.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# provided by Mindpoint Group - A Tyto Athene Company

# Specify the dconf path
[org/gnome/desktop/session]
Expand Down
2 changes: 1 addition & 1 deletion templates/etc/dconf/db/00-screensaver_lock.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# provided by Mindpoint Group - A Tyto Athene Company

# Lock desktop screensaver idle-delay setting
/org/gnome/desktop/session/idle-delay
Expand Down
2 changes: 1 addition & 1 deletion templates/etc/dconf/db/gdm.d/01-banner-message.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# provided by Mindpoint Group - A Tyto Athene Company

[org/gnome/login-screen]
banner-message-enable=true
Expand Down
Loading