2023-02-06 17:04:37 -05:00
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server
2022-10-05 23:53:13 -04:00
=========
2023-02-06 17:04:37 -05:00
Ansible Role for CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server
2022-10-05 23:55:40 -04:00
Profile Description:
2023-02-06 17:04:37 -05:00
This profile defines a baseline that aligns to the "Level 2 - Server"
configuration from the Center for Internet Security® Red Hat Enterprise
Linux 9 Benchmark™, v1.0.0, released 2022-11-28.
This profile includes Center for Internet Security®
Red Hat Enterprise Linux 9 CIS Benchmarks™ content.
2022-10-05 23:55:40 -04:00
The tasks that are used in this role are generated using OpenSCAP.
See the OpenSCAP project for more details on Ansible playbook generation at [https://github.com/OpenSCAP/openscap ](https://github.com/OpenSCAP/openscap )
To submit a fix or enhancement for an Ansible task that is failing or missing in this role,
see the ComplianceAsCode project at [https://github.com/ComplianceAsCode/content ](https://github.com/ComplianceAsCode/content )
2022-10-05 23:53:13 -04:00
Requirements
------------
2022-10-05 23:55:40 -04:00
- Ansible version 2.9 or higher
2022-10-05 23:53:13 -04:00
Role Variables
--------------
2022-10-05 23:55:40 -04:00
To customize the role to your liking, check out the [list of variables ](defaults/main.yml ).
2022-10-05 23:53:13 -04:00
Dependencies
------------
2022-10-05 23:55:40 -04:00
N/A
2022-10-05 23:53:13 -04:00
2022-10-05 23:55:40 -04:00
Example Role Usage
2022-10-05 23:53:13 -04:00
----------------
2022-10-05 23:55:40 -04:00
Run `ansible-galaxy install RedHatOfficial.rhel9_cis` to
download and install the role. Then, you can use the following playbook snippet to run the Ansible role:
2022-10-05 23:53:13 -04:00
2022-10-05 23:55:40 -04:00
- hosts: all
2022-10-05 23:53:13 -04:00
roles:
2022-10-05 23:55:40 -04:00
- { role: RedHatOfficial.rhel9_cis }
Next, check the playbook using (on the localhost) the following example:
ansible-playbook -i "localhost," -c local --check playbook.yml
To deploy it, use (this may change configuration of your local machine!):
ansible-playbook -i "localhost," -c local playbook.yml
2022-10-05 23:53:13 -04:00
License
-------
2022-10-05 23:55:40 -04:00
BSD-3-Clause
2022-10-05 23:53:13 -04:00
Author Information
------------------
2022-10-05 23:55:40 -04:00
This Ansible remediation role has been generated from the body of security
policies developed by the ComplianceAsCode project. Please see
[https://github.com/complianceascode/content/blob/master/Contributors.md ](https://github.com/complianceascode/content/blob/master/Contributors.md )
for an updated list of authors and contributors.