Files
ansible-role-rhel9-cis/README.md

64 lines
2.1 KiB
Markdown
Raw Normal View History

2023-02-06 17:04:37 -05:00
CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server
2022-10-05 23:53:13 -04:00
=========
2023-02-06 17:04:37 -05:00
Ansible Role for CIS Red Hat Enterprise Linux 9 Benchmark for Level 2 - Server
2022-10-05 23:55:40 -04:00
Profile Description:
2023-02-06 17:04:37 -05:00
This profile defines a baseline that aligns to the "Level 2 - Server"
configuration from the Center for Internet Security® Red Hat Enterprise
2025-10-30 11:45:01 -04:00
Linux 9 Benchmark™, v2.0.0, released 2024-06-20.
2023-02-06 17:04:37 -05:00
This profile includes Center for Internet Security®
Red Hat Enterprise Linux 9 CIS Benchmarks™ content.
2022-10-05 23:55:40 -04:00
The tasks that are used in this role are generated using OpenSCAP.
See the OpenSCAP project for more details on Ansible playbook generation at [https://github.com/OpenSCAP/openscap](https://github.com/OpenSCAP/openscap)
To submit a fix or enhancement for an Ansible task that is failing or missing in this role,
see the ComplianceAsCode project at [https://github.com/ComplianceAsCode/content](https://github.com/ComplianceAsCode/content)
2022-10-05 23:53:13 -04:00
Requirements
------------
2022-10-05 23:55:40 -04:00
- Ansible version 2.9 or higher
2022-10-05 23:53:13 -04:00
Role Variables
--------------
2022-10-05 23:55:40 -04:00
To customize the role to your liking, check out the [list of variables](defaults/main.yml).
2022-10-05 23:53:13 -04:00
Dependencies
------------
2022-10-05 23:55:40 -04:00
N/A
2022-10-05 23:53:13 -04:00
2022-10-05 23:55:40 -04:00
Example Role Usage
2022-10-05 23:53:13 -04:00
----------------
2022-10-05 23:55:40 -04:00
Run `ansible-galaxy install RedHatOfficial.rhel9_cis` to
download and install the role. Then, you can use the following playbook snippet to run the Ansible role:
2022-10-05 23:53:13 -04:00
2022-10-05 23:55:40 -04:00
- hosts: all
2022-10-05 23:53:13 -04:00
roles:
2022-10-05 23:55:40 -04:00
- { role: RedHatOfficial.rhel9_cis }
Next, check the playbook using (on the localhost) the following example:
ansible-playbook -i "localhost," -c local --check playbook.yml
To deploy it, use (this may change configuration of your local machine!):
ansible-playbook -i "localhost," -c local playbook.yml
2022-10-05 23:53:13 -04:00
License
-------
2022-10-05 23:55:40 -04:00
BSD-3-Clause
2022-10-05 23:53:13 -04:00
Author Information
------------------
2022-10-05 23:55:40 -04:00
This Ansible remediation role has been generated from the body of security
policies developed by the ComplianceAsCode project. Please see
[https://github.com/complianceascode/content/blob/master/Contributors.md](https://github.com/complianceascode/content/blob/master/Contributors.md)
for an updated list of authors and contributors.