Add handlers for CIS 1.1.12 & 1.1.18 #10
Conversation
When conforming to CIS 1.1.17 (AUDIT | Ensure separate partition exists for /home) and CIS 1.1.11 (AUDIT | Ensure separate partition exists for /var/tmp) the ansible script errors due to the requested handler not being present 1.1.12 | PATCH | Ensure noexec option set on /var/tmp partition ERROR! The requested handler 'remount var_tmp' was not found in either the main handlers list nor in the listening handlers list 1.1.18 | PATCH | Ensure nodev option set on /home partition ERROR! The requested handler 'remount home' was not found in either the main handlers list nor in the listening handlers list I have added the handlers to pass this section of the CIS benchmark if partitions have been configured for these directories
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Congrats on opening your first pull request and thank you for taking the time to help improve Ansible-Lockdown!
Please join in the conversation happening on the Discord Server as well.
|
hi @lukebakare Thank you for the feedback with regard to amazon2-cis and taking the time to raise the PR. Feedback is always appreciated. While the pipeline is working as expected we have noticed that the DCo portion fails on the test. We do require all commits to be signed-off-by and gpg signed. In this case the sign-off is missing. many thanks uk-bolly |
Signed-off-by: Mark Bolwell <[email protected]>
|
hi @lukebakare Thank you again for finding this issue. I have added this PR change into the #14 kind regards uk-bolly |
Signed-off-by: Mark Bolwell <[email protected]> Signed-off-by: fortinm <[email protected]>
When conforming to CIS 1.1.17 (AUDIT | Ensure separate partition exists for /home) and CIS 1.1.11 (AUDIT | Ensure separate partition exists for /var/tmp) the ansible script errors due to the requested handler not being present
1.1.12 | PATCH | Ensure noexec option set on /var/tmp partition
ERROR! The requested handler 'remount var_tmp' was not found in either the main handlers list nor in the listening handlers list1.1.18 | PATCH | Ensure nodev option set on /home partition
ERROR! The requested handler 'remount home' was not found in either the main handlers list nor in the listening handlers listOverall Review of Changes:
I have added the handlers to pass this section of the CIS benchmark if partitions have been configured for these directories
How has this been tested?:
Tested on Amazon Linux 2 with partitions created via LVM