Skip to content
This repository has been archived by the owner. It is now read-only.

Add 5.2.12 and 5.2.14 to centos-6-level-1-scored-v2-0-1 #284

Merged
merged 1 commit into from
Dec 13, 2016
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions hubblestack_nova_profiles/cis/centos-6-level-1-scored-v2-0-1.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -728,6 +728,15 @@ grep:
match_output: "Ciphers aes128-ctr,aes192-ctr,aes256-ctr"
description: Ensure only approved ciphers are used

sshd_approved_mac:
data:
'CentOS-6':
- '/etc/ssh/sshd_config':
tag: CIS-5.2.12
pattern: "MACs"
match_output: "MACs hmac-sha2-512,hmac-sha2-256"
description: Ensure only approved MAC algorithms are used

sshd_idle_timeout:
data:
'CentOS-6':
Expand All @@ -741,6 +750,15 @@ grep:
match_output: "ClientAliveCountMax 0"
description: Ensure SSH Idle Timeout Interval is configured

sshd_login_grace:
data:
'CentOS-6':
- '/etc/ssh/sshd_config':
tag: CIS-5.2.14
pattern: "LoginGraceTime"
match_output: "LoginGraceTime 60"
description: Ensure SSH LoginGraceTime is set to one minute or less

sshd_limit_access:
data:
'CentOS-6':
Expand Down