Ansible CIS repository role

This is an Ansible role which runs CIS RHEL 7 security benchmarks.

You can find the list of checks implemented by the role in the file vars/main.yml within the variable cis_supported_audit_checks.

Role Variables

A list of all the default variables for this role is available in defaults/main.yml. The role setup the following facts:

• cis_kernel_params: list of strings the CIS benchmarks supported
• cis_sshd_config: list of strings with sshd config
• cis_results_fact: list of dicts with the results of the benchmarks

Example Playbook

This is an example playbook:

---

- hosts: all
  roles:
    - amtega.cis

Testing

Tests are based on molecule with vagrant virtual machines.

cd amtega.cis

molecule test --all

License

Copyright (C) 2022 AMTEGA - Xunta de Galicia

This role is free software: you can redistribute it and/or modify it under the terms of:

GNU General Public License version 3, or (at your option) any later version; or the European Union Public License, either Version 1.2 or – as soon they will be approved by the European Commission ­subsequent versions of the EUPL.

This role is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details or European Union Public License for more details.

Author Information

• Juan Antonio Valiño García.
• Daniel Sánchez Fábregas