Skip to content

Security: AphroBytes/STIG-NIST-800-53-Compliance-Playbook-for-Ubuntu-Server

SECURITY.md

Supported OS Versions

  • Ubuntu 20.04 LTS (Focal Fossa)
  • Ubuntu 22.04 LTS (Jammy Jellyfish)

Ansible Version Compatibility

  • Ansible 2.9.x
  • Ansible 2.10.x
  • Ansible 2.11.x
  • Ansible 2.12.x
  • Ansible 2.13.x (and later versions, as long as there are no breaking changes related to the modules used)

Role-Specific Supported Versions

  1. Password Policy

    • Ubuntu 20.04 LTS
    • Ubuntu 22.04 LTS
  2. Account Lockout

    • Ubuntu 20.04 LTS
    • Ubuntu 22.04 LTS
  3. Audit Logging

    • Ubuntu 20.04 LTS (with auditd package)
    • Ubuntu 22.04 LTS (with auditd package)
  4. File Permissions

    • Ubuntu 20.04 LTS
    • Ubuntu 22.04 LTS
  5. Firewall

    • Ubuntu 20.04 LTS (with ufw package)
    • Ubuntu 22.04 LTS (with ufw package)
  6. Service Configuration

    • Ubuntu 20.04 LTS
    • Ubuntu 22.04 LTS
  7. Software Patching

    • Ubuntu 20.04 LTS
    • Ubuntu 22.04 LTS
  8. Hardening

    • Ubuntu 20.04 LTS
    • Ubuntu 22.04 LTS
  9. Compliance Check

    • Ubuntu 20.04 LTS
    • Ubuntu 22.04 LTS

Module Compatibility

  • apt: Supported on Ubuntu 20.04 and 22.04
  • ufw: Supported on Ubuntu 20.04 and 22.04
  • lineinfile: Supported on Ubuntu 20.04 and 22.04
  • file: Supported on Ubuntu 20.04 and 22.04
  • service: Supported on Ubuntu 20.04 and 22.04
  • sysctl: Supported on Ubuntu 20.04 and 22.04
  • copy: Supported on Ubuntu 20.04 and 22.04

Additional Notes

  • While the playbook is designed for Ubuntu 20.04 LTS and 22.04 LTS, it could work with other versions of Ubuntu (e.g., 18.04 LTS) with minor adjustments, particularly in the installation of packages and the handling of specific configurations.
  • You as the end user should ensure they are running a supported version of Ansible for optimal compatibility and functionality.
  • Regular maintenance and updates to the playbook roles may be needed to keep up with changes in Ubuntu and Ansible versions. (May or may not be provided by us)

There aren’t any published security advisories