tests/scap-security-guide
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • d9309972e0 Deprecate repository. main master Milan Lysonek 2024-07-11 14:27:52 +02:00
  • 04775f1d20 Remove Sanity/smoke-test Milan Lysonek 2024-07-10 18:00:16 +02:00
  • 48ddf43968 Sanity/smoke-test: remove old unused adjust Milan Lysonek 2024-07-02 11:19:19 +02:00
  • 0eabefa58c Sanity/ansible-allowed-modules: remove test. Replaced by Contest /static-checks/ansible/allowed-modules Milan Lysonek 2024-07-02 11:18:29 +02:00
  • 2f0fe6eada Sanity/ansible-machine-hardening: remove test. Replaced by Contest /hardening/host-os/ansible Milan Lysonek 2024-07-02 11:15:37 +02:00
  • 5cff2011ea Sanity/machine-hardening: remove test. Replaced by Contest /hardening/host-os/oscap Milan Lysonek 2024-07-02 11:14:09 +02:00
  • 66582ef2b3 Remove scap-security-guide from tiers Matus Marhefka 2024-03-05 12:03:54 +01:00
  • 05734550e7 Sanity/smoke-test: 0.1.72 reviewed Milan Lysonek 2024-02-22 13:56:07 +01:00
  • 675df2d7e7 Merge #49 Allow FQCN ini_file in Ansible playbooks Milan Lysonek 2024-01-19 13:52:03 +00:00
  • 225f5c5894
         Allow FQCN ini_file in Ansible playbooks Matthew Burket 2024-01-10 14:54:00 -06:00
  • b86b0447ed Sanity/smoke-test: import scap-common library Milan Lysonek 2023-12-01 10:10:45 +01:00
  • 87985dac2c Sanity/smoke-test: install Ansible as well so it's tested in ctest Milan Lysonek 2023-12-01 09:40:26 +01:00
  • 3e04a8d8cd After Ansible installation, do not remove anything during cleanup Milan Lysonek 2023-12-01 09:33:45 +01:00
  • 9e42b02603 Library/scap-common: do not remove ansible-core Milan Lysonek 2023-11-30 16:23:57 +01:00
  • 668fa43c4e Disable SSL verification only for OSPP profile, where FIPS:OSPP is used Milan Lysonek 2023-11-08 15:29:35 +01:00
  • d27b2f29b0 Reduce CI tests by removing CI tags Milan Lysonek 2023-10-10 17:08:32 +02:00
  • 5aaac6dc37 Sanity/smoke-test: remove not used tags Milan Lysonek 2023-10-10 16:08:59 +02:00
  • d5ff3a57b6 Limit sslverify workaround to CentOS8<= Milan Lysonek 2023-10-06 11:59:02 +02:00
  • 09e33c7597 Sanity/ansible-machine-hardening: change workaround to force Ansible to use sslverify=false Milan Lysonek 2023-10-05 15:11:51 +02:00
  • 0fc2700166 Disable sslverify for CentOS because of weak RSA key in repos than FIPS:OSPP requires Milan Lysonek 2023-10-05 11:48:57 +02:00
  • 3221fc5738 Sanity/smoke-test: install dependencies also on CentOS Milan Lysonek 2023-09-05 13:50:41 +02:00
  • ec3acd3f4d Include library in pip3 install line too Marcus Burghardt 2023-09-05 11:01:48 +02:00
  • eba10bfa08 Include library used by utils/controleval.py Marcus Burghardt 2023-09-05 10:52:54 +02:00
  • 90044c399b Sanity/machine-hardening: move the sshd waiver before 'unknown' check Milan Lysonek 2023-08-29 10:57:48 +02:00
  • aff8ff3509 Sanity/machine-hardening: waiver for sshd_use_strong_macs Milan Lysonek 2023-08-28 14:58:00 +02:00
  • 8bed717db5 Sanity/smoke-test/review_notes: 0.1.69 check Milan Lysonek 2023-08-10 15:00:57 +02:00
  • 153ebf0f62 Sanity/machine-hardening: allow test on all CentOS distros Milan Lysonek 2023-07-28 09:51:49 +02:00
  • 667aff7dee Sanity/machine-hardening: replace by Contest Jiri Jaburek 2023-07-25 02:27:00 +02:00
  • 8b2bbccf34 Add waivers for RHEL 9 CCN profiles Jan Černý 2023-07-24 13:39:35 +02:00
  • a04fb7e052 Sanity/smoke-test: extend duration to 90min (because of Fedora CI) Milan Lysonek 2023-06-19 11:34:31 +02:00
  • 8a0d933d8e Library/scap-results/rule_waivers/rhel7: waive sysctl_net_ipv4_ip_forward in CIS Workstation Milan Lysonek 2023-06-06 10:08:58 +02:00
  • 6630b9509f Library/scap-results/rule_waivers: waive zipl_bootmap_is_up_to_date in CUI (same as in OSPP) Milan Lysonek 2023-05-31 09:35:02 +02:00
  • adaf38dad7 Sanity/ansible-machine-hardening: TCMS export for remaining profile tests Milan Lysonek 2023-05-25 09:36:11 +02:00
  • efa34a3940 Sanity/machine-hardening: skip ISM on RHEL7 Milan Lysonek 2023-05-25 09:31:10 +02:00
  • 1faca2c660 Sanity/machine-hardening: TCMS export for remaining profile tests Milan Lysonek 2023-05-24 17:20:42 +02:00
  • 29254f3fa4 Library/scap-results/rule_waivers: waive service_nftables_disable because the service is not seen during first scan Milan Lysonek 2023-05-17 10:08:00 +02:00
  • 5042220fd5 Sanity/ansible-machine-hardening: add missing profile variants Milan Lysonek 2023-04-25 15:18:32 +02:00
  • a08ba6ba5e Sanity/ansible-machine-hardening: change filename to reflect full profile identifier Milan Lysonek 2023-04-25 15:15:33 +02:00
  • c4d2eb0905 Sanity/machine-hardening: add missing profile variants Milan Lysonek 2023-04-25 15:11:25 +02:00
  • 6338c5c37a Machine hardening tests as required in CI Milan Lysonek 2023-04-25 15:02:08 +02:00
  • b9e82157b7 Sanity/smoke-test: reduce duration to 1h Milan Lysonek 2023-04-25 14:54:57 +02:00
  • 3f1de6a7a2 Introduce order numbers for general test plan Milan Lysonek 2023-04-25 17:04:06 +02:00
  • 40fd6a8fb9 Add daily productization tag cortesana 2023-04-14 14:27:56 +02:00
  • 21a4212584 Sanity/ansible-machine-hardening: unselect Ansible 2.9 incompatible rules on RHEL 8.4 Milan Lysonek 2023-03-01 11:03:06 +01:00
  • 9eaabe95b4 Sanity/smoke-test: update review_notes to version 0.1.66 Milan Lysonek 2023-02-15 11:37:20 +01:00
  • fd0fd94d12 Waive rpcbind (beakerlib dependency) and world writable files (beakerlib issue) Milan Lysonek 2023-01-26 10:13:09 +01:00
  • 43fa6078e8 Waive rule sshd_use_approved_kex_ordered_stig Jan Černý 2023-01-25 13:58:42 +01:00
  • f9a714e723 Library/scap-results/rule_waivers/rhel8: waive configure_bashrc_tmux (dependency problem) Milan Lysonek 2023-01-25 14:38:16 +01:00
  • 8f43e46880 Library/scap-results/rule_waivers/rhel8: remove temporary waivers Milan Lysonek 2023-01-16 12:08:33 +01:00
  • b460eb802a Do not remove rsync in machine hardening Milan Lysonek 2023-01-13 09:53:06 +01:00
  • 5c5ecfd200 Sanity/ansible-machine-hardening: ensure NetworkManager is running Milan Lysonek 2023-01-03 17:13:35 +01:00
  • 3be807f362 Exclude aide_use_fips_hashes rule on CentOS as it requires FIPS certified OS Milan Lysonek 2023-01-03 17:10:21 +01:00
  • 5173c5aeeb Install firewalld as setup for hardening tests Milan Lysonek 2023-01-03 15:32:23 +01:00
  • c1819e9d99 Sanity/ansible-machine-hardening: don't check FIPS certified OS on CentOS Milan Lysonek 2023-01-03 15:27:21 +01:00
  • 3a05515ca3 Sanity/machine-hardening: don't check FIPS certified OS on CentOS Milan Lysonek 2023-01-03 15:27:07 +01:00
  • 1dc8c310ea Library/scap-results/rule_waivers: temporary waive some PAM rules Milan Lysonek 2022-12-14 15:00:44 +01:00
  • 7e7facdc06 Library/scap-results/rule_waivers/rhel8: temporary ANSSI waiver Milan Lysonek 2022-12-13 16:13:22 +01:00
  • 4de4b2959e Sanity/ansible-machine-hardening: install NetworkManager required by some rules Milan Lysonek 2022-12-13 14:08:50 +01:00
  • e7cb70ae62 Library/scap-results/rule_waivers: temporary ANSSI waiver Milan Lysonek 2022-12-12 15:50:59 +01:00
  • fbb9db3e8a Sanity/ansible-allowed-modules: disable also on CentOS 7 Milan Lysonek 2022-12-08 15:22:55 +01:00
  • 5375596b84 Sanity/machine-hardening: Don't test ANSSI on Fedora Watson Sato 2022-12-07 17:51:11 +01:00
  • 29a4d31ce4 Sanity/ansible-machine-hardening: Don't test ANSSI on Fedora Watson Sato 2022-12-07 17:50:29 +01:00
  • d713267639 Sanity/ansible-machine-hardening: disable on RHEL7 ppc64 and s390x Matus Marhefka 2022-12-07 10:33:00 +01:00
  • ad4bfd0884 Sanity/cpe-applicability: change tested package Matus Marhefka 2022-12-05 15:39:34 +01:00
  • dc9d2ab7d1 Sanity/cpe-applicability: add a check for Ansible remediations applicability Matus Marhefka 2022-07-01 12:43:37 +02:00
  • 924ac0a482 Sanity/cpe-applicability: new test to verify CPE AL extension Matus Marhefka 2022-06-16 18:46:19 +02:00
  • d93bd495e9 Sanity/ansible-machine-hardening: waiver for https://github.com/OpenSCAP/openscap/issues/1867 Milan Lysonek 2022-12-01 12:22:52 +01:00
  • eade3449e4 Sanity/ansible-machine-hardening: extend duration to 90min (mainly because of STIG profile) Milan Lysonek 2022-11-25 15:17:30 +01:00
  • c43e0a4aec Sanity/ansible-machine-hardening: waive pcre_exec error Milan Lysonek 2022-11-25 13:15:52 +01:00
  • ff4273a628 Sanity/ansible-machine-hardening: export CIS and ANSSI Milan Lysonek 2022-11-23 09:57:36 +01:00
  • 6b706c7432 Sanity/ansible-machine-hardening: add CIS and ANSSI TCs Milan Lysonek 2022-11-23 09:42:56 +01:00
  • 6939b7c9c9 Sanity/ansible-machine-hardening: export to TCMS Milan Lysonek 2022-11-09 11:49:23 +01:00
  • 332494eaec Sanity/ansible-machine-hardening: print to stdout Milan Lysonek 2022-11-09 11:48:29 +01:00
  • e67811ffb5 Sanity/ansible-machine-hardening: add OSPP and STIG cases Milan Lysonek 2022-11-09 10:33:27 +01:00
  • d64c9f18f2 Sanity/ansible-machine-hardening: new test case which tests Ansible playbook hardening Milan Lysonek 2022-11-07 17:33:52 +01:00
  • 94d026d03c Waive firewalld_sshd_port_enabled Watson Sato 2022-11-07 14:47:31 +01:00
  • 33aa9a096d Library/scap-results/rule_waivers: update rhel9 waivers Milan Lysonek 2022-10-27 16:54:51 +02:00
  • a2be7569c8 Library/scap-results/rule_waivers: update rhel8 waivers Milan Lysonek 2022-10-27 15:31:04 +02:00
  • aa5f96d183 Library/scap-results/rule_waivers: update rhel7 waivers Milan Lysonek 2022-10-27 12:02:37 +02:00
  • 483fc68050 Sanity/machine-hardening: export CIS and ANSSI test cases Milan Lysonek 2022-10-26 17:20:01 +02:00
  • ad4ec4dd36 Sanity/machine-hardening: extend with CIS and ANSSI test cases Milan Lysonek 2022-10-26 16:19:05 +02:00
  • 29087a5135 Sanity/machine-hardening: scap-common import not needed because it's imported with scap-results lib Milan Lysonek 2022-10-21 13:46:39 +02:00
  • 7ca6f21d8a Library/scap-results: make scap-common library as scap-results library dependency Milan Lysonek 2022-10-19 12:07:09 +02:00
  • 9cf8ca43f2 Library/scap-results: make datastream required argument Milan Lysonek 2022-10-19 12:06:02 +02:00
  • a500c86fd1 Sanity/machine-hardening: waiver for https://github.com/OpenSCAP/openscap/issues/1867 Milan Lysonek 2022-10-20 14:43:08 +02:00
  • 25e668a36d Sanity/ansible-allowed-modules: make sure allowed modules are obtained properly on Fedora Matus Marhefka 2022-10-18 13:55:21 +02:00
  • 247d89e594 Sanity/machine-hardening: utilize scap-common library Matus Marhefka 2022-10-14 18:10:38 +02:00
  • 5718ac0b6c Sanity/ansible-allowed-modules: utilize scap-common library Matus Marhefka 2022-08-25 11:57:07 +02:00
  • a81377d5f2 Library/scap-common: new library with common functions for work with SCAP content Matus Marhefka 2022-08-23 17:32:41 +02:00
  • 6ceba21be9 Sanity/machine-hardening: handle properly disabling FIPS mode on RHEL7 Matus Marhefka 2022-10-04 15:51:59 +02:00
  • 42df391bb4 Add RHEL9 waivers for rpm_verify_permissions (STIG, STIG_GUI). Gabriel Becker 2022-09-26 11:03:23 +02:00
  • b3872e74c1 Sanity/machine-hardening: fix sos reports generation Matus Marhefka 2022-09-22 17:44:29 +02:00
  • 7827b69a1c Sanity/machine-hardening: enable testing of FIPS rules Matus Marhefka 2022-09-22 17:36:36 +02:00
  • 31ef06b3fa Add RHEL8 and RHEL9 waivers for zipl_bootmap_is_up_to_date rule (OSPP) Matus Marhefka 2022-08-26 17:35:24 +02:00
  • ceac13b476 Sanity/machine-hardening: add read permissions to sos report so it is accessible in TF Matus Marhefka 2022-08-25 17:32:12 +02:00
  • 28a183ea46 Waive rpm_verify_permissions in the RHEL 9 STIG Jan Černý 2022-08-23 13:40:05 +02:00
  • 4cf02d2eed Sanity/smoke-test: update review_notes to version 0.1.63 Milan Lysonek 2022-08-19 15:19:13 +02:00
  • f112e08b66 Library/scap-results/rule_waivers: update waivers for OSPP and STIG Matus Marhefka 2022-08-18 14:36:36 +02:00
  • dbb30b8d45 Library/ssg-test-suite-upstream: add accounts_password_pam_retry waiver Milan Lysonek 2022-08-17 09:53:29 +02:00
  • 9135ffc848 Sanity/machine-hardening: add generaration of sos reports on test failures Matus Marhefka 2022-08-11 15:39:14 +02:00