CIS 4.1.1.3 #85
Merged
CIS 4.1.1.3 #85
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
chris-rock
approved these changes
Nov 17, 2017
atomic111
approved these changes
Nov 18, 2017
|
@chris-rock @atomic111 this change has broken the tests for chef-os-hardening. As we currently are not managing the audit configuration, any ideas how to handle this? (I do not have time to implement it now) Should we create an issue in the implementation repo and disable this test for now? |
|
I created dev-sec/chef-os-hardening#182 and dev-sec/chef-os-hardening#181 |
|
We could pin to released versions of the benchmark... |
|
@chris-rock Hm, okay. But this would lead to a recurrent version repining, right? |
|
yes, unfortunately. I am open to any other idea |
|
@chris-rock I do not have any other idea :\ For me personally its easier to live with a current setup (#55 would make it even better). But if somebody has a better idea, I would be also happy to hear it |
Closed
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
For CIS v2.1:
4.1.1.3 Ensure audit logs are not automatically deleted:
Audit:
Run the following command and verify output matches:
max_log_file_action = keep_logs