commit: f9573ed8e7a80a312df8ab16c54c30ea89e8b0ad
[log] [tgz]
author: kochera <kochera@google.com>
Fri Aug 12 18:18:11 2022 +0000
committer: Michael Kochera <kochera@google.com>
Tue Aug 16 14:40:34 2022 +0000
tree: dd76598b6e80987748cd6befe8efd8b89ecb0579
parent: e44e4779ac6bb4f7996b2f6d0ae9e266c9a66f61 [diff]

Rename scripts to match config IDs

BUG=b/233626741
TEST=http://sponge2/873a4fbc-f743-4b93-a631-acf477a8ec31
RELEASE_NOTE=Renames configuration scripts used for CIS-Compliance.

cos-patch: lts-refresh
Change-Id: I44ca056bcf609eb92d64c39e01d614e3e6431121

alphabet-compliance/scripts/1117-udf-mounting-disabled.sh[Renamed from alphabet-compliance/scripts/1117-disable-udf-mounting.sh - diff]
alphabet-compliance/scripts/1510-core-dumps-restricted-cos.sh[Renamed from alphabet-compliance/scripts/1510-restrict-core-dumps.sh - diff]
alphabet-compliance/scripts/3220-packet-redirect-sending-disabled-cos.sh[Renamed from alphabet-compliance/scripts/3220-ensure-ICMP-redirects-not-accepted.sh - diff]
alphabet-compliance/scripts/3230-secure-icmp-redirects-not-accepted-cos.sh[Renamed from alphabet-compliance/scripts/3230-disable-secure-redirects.sh - diff]
alphabet-compliance/scripts/3240-suspicious-packets-logged-cos.sh[Renamed from alphabet-compliance/scripts/3240-log-suspicious-packets.sh - diff]
alphabet-compliance/scripts/3290-ipv6-router-advertisements-not-accepted-cos.sh[Renamed from alphabet-compliance/scripts/3290-disable-IPv6-router-ads.sh - diff]
alphabet-compliance/scripts/4222-journald-compress-large-log-files-cos.sh[Renamed from alphabet-compliance/scripts/4222-compress-large-log-files.sh - diff]
alphabet-compliance/scripts/4230-logfile-permissions-cos.sh[Renamed from alphabet-compliance/scripts/4230-set-permissions-of-log-files.sh - diff]
alphabet-compliance/scripts/5214-strong-mac-algorithm-used.sh[Renamed from alphabet-compliance/scripts/5214-configure-MAC-algorithms.sh - diff]
alphabet-compliance/scripts/5216-ssh-idle-timeout-interval-configured.sh[Renamed from alphabet-compliance/scripts/5216-configure-ssh-idle-timeout.sh - diff]
alphabet-compliance/scripts/5217-ssh-logingrace-one-minute-or-less.sh[Renamed from alphabet-compliance/scripts/5217-configure-ssh-LoginGraceTime.sh - diff]
alphabet-compliance/scripts/5219-ssh-warning-banner-configured.sh[Renamed from alphabet-compliance/scripts/5219-configure-ssh-banner.sh - diff]
alphabet-compliance/scripts/5221-ssh-allowtcpforwarding-disabled.sh[Renamed from alphabet-compliance/scripts/5221-disable-ssh-AllowTcpForwarding.sh - diff]
alphabet-compliance/scripts/5222-ssh-maxstartups-configured.sh[Renamed from alphabet-compliance/scripts/5222-configure-ssh-MaxStartups.sh - diff]
alphabet-compliance/scripts/5223-ssh-maxsessions-4-or-less.sh[Renamed from alphabet-compliance/scripts/5223-configure-ssh-MaxSessions.sh - diff]
alphabet-compliance/scripts/5270-ssh-maxauthtries-4-or-less.sh[Renamed from alphabet-compliance/scripts/5270-configure-ssh-MaxAuthTries.sh - diff]
alphabet-compliance/scripts/5310-password-creation-reqs-configured-cos.sh[Renamed from alphabet-compliance/scripts/5310-configure-password-requirements.sh - diff]
alphabet-compliance/scripts/5330-password-reuse-limited.sh[Renamed from alphabet-compliance/scripts/5330-configure-password-reuse.sh - diff]
alphabet-compliance/scripts/5340-password-hashing-algorithm-sha-512.sh[Renamed from alphabet-compliance/scripts/5340-set-password-hashing-algorithm.sh - diff]
alphabet-compliance/scripts/5411-password-expiration-365-days-or-less.sh[Renamed from alphabet-compliance/scripts/5411-configure-password-expiration.sh - diff]
alphabet-compliance/scripts/5412-minimum-days-between-password-changes-7-or-more.sh[Renamed from alphabet-compliance/scripts/5412-configure-password-change-timeframe.sh - diff]
alphabet-compliance/scripts/5414-inactive-password-lock-30-days-or-less.sh[Renamed from alphabet-compliance/scripts/5414-configure-inactive-password-timeframe.sh - diff]
alphabet-compliance/scripts/5420-system-accounts-secured.sh[Renamed from alphabet-compliance/scripts/5420-configure-system-accounts.sh - diff]
alphabet-compliance/scripts/5440-default-user-umask-027-or-more-restrictive-cos.sh[Renamed from alphabet-compliance/scripts/5440-configure-default-user-umask.sh - diff]
alphabet-compliance/scripts/5450-default-user-shell-timeout-900-or-less-cos.sh[Renamed from alphabet-compliance/scripts/5450-configure-default-shell-timeout.sh - diff]

25 files changed

tree: dd76598b6e80987748cd6befe8efd8b89ecb0579

README.md

Compliance Scripts for Container-Optimized OS

These are experimental scripts developed for Alphabet compliance. The sections referred on the scripts are from CIS Distribution Independent Linux Benchmark v2.0.0