egida-role-cis

egida-role-cis

EGIDA CIS Benchmarks Role
Explore the docs »

View Source · Report Bug · Request Feature

Table of Contents

• About the Project
• Getting Started
  • Prerequisites
  • Installation
• Example Playbook
• Lynis Scores
• CIS Benchmarks Exclusions
• License
• Contact

About the Project

This role was developed and tested against Ubuntu Linux 20.04 LTS.

The CIS Benchmarks used for this repository can be found at CIS Center for Intenet Security.

Getting Started

Getting Started

Prerequisites

1. Ansible

Installation

ansible-galaxy install antonioalfa22.egida_role_cis

Example Playbook

---

- name: Harden Server
  hosts: localhost
  connection: local
  become: yes
  
  roles:
    - egida-role-cis

Lynis scores

• Initial Lynis score: 62%
• Lynis score with All + Extras: 83%

CIS Benchmarks Exclusions

1 Initial setup

1.1 Filesystem Configuration

• 1.1.2
• 1.1.5
• 1.1.6
• 1.1.7
• 1.1.8
• 1.1.9
• 1.1.10
• 1.1.11
• 1.1.12
• 1.1.13
• 1.1.14
• 1.1.15
• 1.1.16
• 1.1.17
• 1.1.18
• 1.1.19
• 1.1.20
• 1.1.21
• 1.1.22
• 1.1.23

1.2 Configure software updates

• 1.2.2

1.3 Configure sudo

• 1.3.1
• 1.3.2
• 1.3.3

1.5 Secure Boot Settings

• 1.5.4

1.7 Mandatory Access Control

• 1.7.1.1
• 1.7.1.2
• 1.7.1.3
• 1.7.1.4

3 Network Configuration

3.7 Disable IPv6

• 3.7

4 Logging and auditing

4.1 Configure System accouting

• 4.1.1.4
• 4.1.2.1
• 4.1.2.2
• 4.1.2.3
• 4.1.11

4.2 Configure Logging

• 4.2.1.2
• 4.2.1.3
• 4.2.1.4
• 4.2.1.5
• 4.2.1.6
• 4.2.2.1
• 4.2.2.2
• 4.2.2.3
• 4.2.3
• 4.3

5 Access Autentication and Authorization

5.2 SSH Server configuration

• 5.2.2
• 5.2.3
• 5.2.13
• 5.2.15
• 5.2.20
• 5.2.21
• 5.2.22
• 5.2.23

5.4 User Accounts and environment

• 5.4.1.5
• 5.4.2
• 5.5
• 5.6

6 System file permissions

6.1 System file permissions

• 6.1.1
• 6.1.10
• 6.1.11
• 6.1.12
• 6.1.13
• 6.1.14

6.2 User Accounts and environment

• All

License

Distributed under the Apache 2.0 License. See LICENSE for more information.

Contact

Authors:

• Antonio Payá González
• Alba Cotarelo Tuñón
• Jose Manuel Redondo Lopez

Project Link: https://github.com/egida-kassandra/egida-role-cis