Removing security headers from SLA audit profile

AmazeeLabs · Sep 28, 2020 · 9e65217 · 9e65217
1 parent 9a4d9fd
commit 9e65217
Showing 1 changed file with 58 additions and 48 deletions.
diff --git a/Profiles/algm_sla_site.profile.yml b/Profiles/algm_sla_site.profile.yml
@@ -1,54 +1,64 @@
 title: 'ALGM Drupal 8 & 9 SLA audit'
 description: 'This audit is for Drupal 8 & Drupal 9 sites which are under the ALGM SLA'
 policies:
-    # General
-    'algm:HealthCheck': { severity: high }
-    'algm:DrushStatus': { severity: normal }
-    'algm:FileSystemAnalysis': { severity: normal }
-    'algm:ModuleUpdates': { severity: high }
-    # D8
-    'Drupal-8:CronLast': { severity: normal }
-    'Drupal-8:JsAggregation': { severity: normal }
-    'Drupal-8:CssAggregation': { severity: normal }
-    'Drupal-8:KintDisabled': { severity: normal }
-    'Drupal-8:DblogDisabled': { severity: normal }
-    'Drupal-8:DevelDisabled': { severity: normal }
-    'Drupal-8:DuplicateModules': { severity: normal }
-    'Drupal-8:ErrorLevel': { severity: normal }
-    'Drupal-8:Fast404Enabled': { severity: normal }
-    'Drupal-8:WebprofilerDisabled': { severity: normal }
-    'Drupal-8:ContentOwnedByAnonymous': { severity: normal }
-    # FS and Database
-    'fs:largeFiles': { severity: normal }
-    'fs:DrupalThemeDirectory':
-      {
-        severity: normal,
-        parameters: {
-          path: '/app/web/themes/custom/',
-          max_size: 50
-        }
+  # General
+  'algm:HealthCheck': { severity: high }
+  'algm:DrushStatus': { severity: normal }
+  'algm:FileSystemAnalysis': { severity: normal }
+  'algm:ModuleUpdates': { severity: high }
+  # D8
+  'Drupal-8:CronLast': { severity: normal }
+  'Drupal-8:CronHasRun': { severity: normal }
+  'Drupal-8:NoAutomatedCron': { severity: normal }
+  'Drupal-8:JsAggregation': { severity: normal }
+  'Drupal-8:CssAggregation': { severity: normal }
+  'Drupal-8:KintDisabled': { severity: normal }
+  'Drupal-8:DblogDisabled': { severity: normal }
+  'Drupal-8:DevelDisabled': { severity: normal }
+  'Drupal-8:ShieldDisabled': { severity: normal }
+  'Drupal-8:StatisticsDisabled': { severity: normal }
+  'Drupal-8:DuplicateModules': { severity: normal }
+  'Drupal-8:ErrorLevel': { severity: normal }
+  'Drupal-8:Fast404Enabled': { severity: normal }
+  'Drupal-8:ContentOwnedByAnonymous': { severity: normal }
+  'Drupal-8:PageCacheExpiry': { severity: normal }
+  # FS and Database
+  'fs:largeFiles': { severity: normal }
+  'fs:DrupalThemeDirectory':
+    {
+      severity: normal,
+      parameters: {
+        path: '/app/web/themes/custom/',
+        max_size: 50
       }
-    'Drupal:largeFiles': { severity: normal }
-    'Drupal:updates': { severity: normal }
-    'Database:Fulltext': { severity: normal }
-    'Database:Size': { severity: normal }
-    # Security
-    'algm:Security:D8SecurityModuleUpdates': { severity: high }
-    'fs:SensitivePublicFiles':
-      {
-        severity: high,
-        parameters: {
-          extensions: 'sql, sh, php, py, bz2, gz, tar, tgz, zip'
-        }
+    }
+  'Drupal:largeFiles': { severity: normal }
+  'Drupal:updates': { severity: normal }
+  'Database:Fulltext': { severity: normal }
+  'Database:Size': { severity: normal }
+  # Security
+  'algm:Security:D8SecurityModuleUpdates': { severity: high }
+  'Drupal-8:ConfigDevelDisabled': { severity: normal }
+  'Drupal-8:NoBackupAndMigrate': { severity: normal }
+  'Drupal-8:NoExperimental': { severity: normal }
+  'Drupal-8:PhpDisabled': { severity: normal }
+  'Drupal-8:SimpleTestDisabled': { severity: normal }
+  'Drupal-8:UnusedModules': { severity: normal }
+  'Drupal-8:UpdateDisabled': { severity: normal }
+  'Drupal-8:UserRegistrationAdminOnly': { severity: normal }
+  'Drupal-8:WebprofilerDisabled': { severity: normal }
+  'fs:SensitivePublicFiles':
+    {
+      severity: high,
+      parameters: {
+        extensions: 'sql, sh, php, py, bz2, gz, tar, tgz, zip'
       }
-    'Drupal-8:UserRegistrationAdminOnly': { severity: normal }
-    'Drupal-8:User1LockDown':
-      {
-        severity: high,
-        parameters: {
-          blacklist: 'admin, root, drupa, amazee, amazeelabs, zhadmin',
-          status: 1
-        }
+    }
+  'Drupal-8:User1LockDown':
+    {
+      severity: high,
+      parameters: {
+        blacklist: 'admin, root, drupal, amazee, amazeelabs',
+        status: 1
       }
-include:
-  - d8_security_review
+    }