Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Align sshd_use_approved_macs_ordered_stig with Ubuntu STIG #11853

Merged
merged 6 commits into from
May 10, 2024
Merged

Align sshd_use_approved_macs_ordered_stig with Ubuntu STIG #11853

merged 6 commits into from
May 10, 2024

Commits on May 9, 2024

  1. Define sshd_approved_macs variable in Ubuntu STIG profiles

    @mpurg
    mpurg committed May 9, 2024
    Configuration menu
    Copy the full SHA
    d9bcec0 View commit details
    Browse the repository at this point in the history

  2. Modify Ubuntu text for sshd_use_approved_macs_ordered_stig 

    Text was aligned with STIG rules UBTU-20-010043 and UBTU-22-255055.
    @mpurg
    mpurg committed May 9, 2024
    Configuration menu
    Copy the full SHA
    22c107c View commit details
    Browse the repository at this point in the history

  3. Fix Ubuntu tests for sshd_use_approved_macs_ordered_stig

    @mpurg
    mpurg committed May 9, 2024
    Configuration menu
    Copy the full SHA
    3095bbe View commit details
    Browse the repository at this point in the history

  4. Modify Ubuntu OVAL for sshd_use_approved_macs_ordered_stig 

    The OVAL now also allows distributed configs and uses
the variable `sshd_approved_macs` instead of hardcoded values.

The implementation is based on the template `sshd_lineinfile`,
modified to allow external variables as values and checking for
FIPS compliant OS.
    @mpurg
    mpurg committed May 9, 2024
    Configuration menu
    Copy the full SHA
    30c5973 View commit details
    Browse the repository at this point in the history

  5. Modify Ubuntu bash remediation for sshd_use_approved_macs_ordered_stig 

    The remediation now uses the bash_sshd_remediation macro and the
sshd_approved_macs variable.
    @mpurg
    mpurg committed May 9, 2024
    Configuration menu
    Copy the full SHA
    1fd5296 View commit details
    Browse the repository at this point in the history

  6. Modify Ubuntu ansible remediation for sshd_use_approved_macs_ordered_… 

    …stig

The remediation now uses the ansible_sshd_set macro and the
sshd_approved_macs variable.
    @mpurg
    mpurg committed May 9, 2024
    Configuration menu
    Copy the full SHA
    9f849e5 View commit details
    Browse the repository at this point in the history