Add Variable-based CPE and UFW rules for Ubuntu 20.04 STIG#7635

Closed

dodys wants to merge 32 commits intoComplianceAsCode:masterfrom dodys:ufw-rules

+634-12

Commits on Feb 10, 2022

Add macro for shared variable<->value checks

cipherboy
authored and
dodys
committed
Add applicability checks against variables

cipherboy
authored and
dodys
committed
Add removed form to complete_ocil_entry_package

cipherboy
authored and
dodys
committed
Start tracking var_applicability separately

cipherboy
authored and
dodys
committed
Update remediation to understand variable-based applicability

cipherboy
authored and
dodys
committed
Prevent generation of var_ based CPEs

cipherboy
authored and
dodys
committed
Add variable-based CPEs into hand-written OVALs

cipherboy
authored and
dodys
committed
Update templated OVALs to obey variable-based CPE checks

cipherboy
authored and
dodys
committed
Support variable-based CPE platforms

cipherboy
authored and
dodys
committed
Add sub-namespaces to oval parsing

cipherboy
authored and
dodys
committed
Add pseudo variable-based CPEs land to templates

cipherboy
authored and
dodys
committed
Correctly handle negation for pseudo-CPEs

cipherboy
authored and
dodys
committed
Fix variable population

cipherboy
authored and
dodys
committed
Add var_firewall_package for selecting which firewall to use

cipherboy
authored and
dodys
committed
Add firewall-based CPE variables

cipherboy
authored and
dodys
committed
Add OVAL checks for all variable CPEs

cipherboy
authored and
dodys
committed
Add Uncomplicated Firewall (ufw) group

cipherboy
authored and
dodys
committed
Add package_ufw_installed for CIS 3.5.1.1

cipherboy
authored and
dodys
committed
Add platforms for package_ufw_installed

cipherboy
authored and
dodys
committed
Add stigid, disa and srg references to package_ufw_installed
dodys
committed
Add package_ufw_installed to Ubuntu 20.04 STIG profile
dodys
committed
Add service_ufw_enabled for CIS 3.5.1.3

cipherboy
authored and
dodys
committed
Add platforms for service_ufw_enabled

cipherboy
authored and
dodys
committed
Add stigid, disa and srg to service_ufw_enabled
dodys
committed
Add service_ufw_enabled to Ubuntu 20.04 STIG profile
dodys
committed
Add rule ufw_rate_limit
dodys
committed
Add ufw_rate_limit to Ubuntu 20.04 STIG profile
dodys
committed
Add rule ufw_only_required_services
dodys
committed
Add ufw_only_required_services to Ubuntu 20.04 STIG profile
dodys
committed
Fix pep8 issue
dodys
committed
Replace populate with bash-populate in build_remediations
dodys
committed
Define default firewall for Ubuntu 20.04 STIG profile
dodys
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add Variable-based CPE and UFW rules for Ubuntu 20.04 STIG#7635

Commits on Feb 10, 2022

Add macro for shared variable<->value checks

Add applicability checks against variables

Add removed form to complete_ocil_entry_package

Start tracking var_applicability separately

Update remediation to understand variable-based applicability

Prevent generation of var_ based CPEs

Add variable-based CPEs into hand-written OVALs

Update templated OVALs to obey variable-based CPE checks

Support variable-based CPE platforms

Add sub-namespaces to oval parsing

Add pseudo variable-based CPEs land to templates

Correctly handle negation for pseudo-CPEs

Fix variable population

Add var_firewall_package for selecting which firewall to use

Add firewall-based CPE variables

Add OVAL checks for all variable CPEs

Add Uncomplicated Firewall (ufw) group

Add package_ufw_installed for CIS 3.5.1.1

Add platforms for package_ufw_installed

Add stigid, disa and srg references to package_ufw_installed

Add package_ufw_installed to Ubuntu 20.04 STIG profile

Add service_ufw_enabled for CIS 3.5.1.3

Add platforms for service_ufw_enabled

Add stigid, disa and srg to service_ufw_enabled

Add service_ufw_enabled to Ubuntu 20.04 STIG profile

Add rule ufw_rate_limit

Add ufw_rate_limit to Ubuntu 20.04 STIG profile

Add rule ufw_only_required_services

Add ufw_only_required_services to Ubuntu 20.04 STIG profile

Fix pep8 issue

Replace populate with bash-populate in build_remediations

Define default firewall for Ubuntu 20.04 STIG profile