CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server

Ansible Role for CIS Red Hat Enterprise Linux 8 Benchmark for Level 2 - Server

Profile Description:
This profile sets a standard based on the "Level 2 - Server"
configuration from the Center for Internet Security® Red Hat Enterprise
Linux 8 Benchmark™, version 3.0.0, released on 2023-10-30.
It includes guidelines from the Center for Internet Security®
Red Hat Enterprise Linux 8 CIS Benchmarks™.

The tasks in this role are created using OpenSCAP.
For more information about generating Ansible playbooks, visit the OpenSCAP project at https://github.com/OpenSCAP/openscap.

If you want to report a problem or suggest an improvement for a failing or missing Ansible task in this role, visit the ComplianceAsCode project at https://github.com/ComplianceAsCode/content.

Requirements

• Ansible version 2.9 or higher

Role Variables

To personalize the role, check out the list of variables.

Dependencies

None

Example Role Usage

To download and install the role, run ansible-galaxy install RedHatOfficial.rhel8_cis. After that, you can use the following playbook snippet to run the Ansible role:

- hosts: all
  roles:
     - { role: RedHatOfficial.rhel8_cis }

Next, you can check the playbook using the following command (on the localhost):

ansible-playbook -i "localhost," -c local --check playbook.yml

To run it, use the following command (this may change your local machine's settings!):

ansible-playbook -i "localhost," -c local playbook.yml

License

BSD-3-Clause

Author Information

This Ansible role was created based on security policies from the ComplianceAsCode project. For an updated list of authors and contributors, please visit https://github.com/complianceascode/content/blob/master/Contributors.md.