-
Notifications
You must be signed in to change notification settings - Fork 749
Refresh CIS Control File for RHEL10 release 1.0 #13870
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Refresh CIS Control File for RHEL10 release 1.0 #13870
Conversation
Skipping CI for Draft Pull Request. |
817615d
to
aaea092
Compare
I have collected all the rules/variables that changed from the previous CIS RHEL10 Draft and will go through to make sure we are not missing anything, specially the variables that seem to be missing in many cases, I used the log from this pipeline: https://github.com/ComplianceAsCode/content/actions/runs/17553024844/job/49849902507?pr=13870 |
These rules make sure the GDM configuration is locked. The requirement was merged.
The old requirement does not exist anymore 5.3.1.3 Ensure latest version of libpwquality is installed (Automated)
I have further identified that the v1.0.0 has way more content compared to the Fedora v40 draft. I will need some more time to go through some items, specially around the audit that got way more granular compared to previous versions. I have already reverted many changes compared to the old control file with the new one, according to variables and split of requirements, but there are many items to be processed yet. |
4bc327b
to
9c84ee9
Compare
8e0e05f
to
39e4e9d
Compare
@Mab879 I believe this is now in a decent state to be reviewed. I went ahead and tried to cover all the gaps and make sure the control file does not break the indentation so it's easier to review. There are many changes though, so it's not an easy task. Hopefully there aren't major issues with the PR. It was a lot of effort to get to the state where it is right now. Updating a major version for a control file is definitely a major hassle :( |
Description: