kickstart + audit shell script : CIS benchmarks

Support for security such as Firewalls and securing linux
Post Reply
ross_h
Posts: 1
Joined: 2015/10/07 19:27:05

kickstart + audit shell script : CIS benchmarks

Post by ross_h » 2015/10/28 19:19:42

I've done a kickstart profile which is meant to help towards meeting the CIS benchmarks: centos7-cis.ks
and a shell script to help audit whether a host meets the CIS benchmarks or not: cis-audit

Both work fine as far as I can tell. If anyone has time to review, I'd appreciate any comments or feedback. I'd be particularly interested in bug reports if anyone is kind enough to test.

They can be found at:
https://github.com/rosshamilton1/cissec


Unimportant Notes/Explanation:
I don't consider either to be the finished article. The shell script in particular is just a starting point. It's provided in it's current form as someone could easily pick it up and modify it to suit their own purposes. The output could be made more useful, I haven't decided on how it should look yet.
Yep I know it's a 1600 line shell script, usually if it was going to be 100+ lines I would use python. However sys admins are the intended users, I expect most sysadmins should be comfortable looking at shell, python may be tricky or off-putting for a significant number of people, hence bash.
The shell script is done in a way which is intended to be very easy to follow. The aim is to have a simple structure so that a user could easily modify it to suit their own environment. I realise this results in an unnecessarily lengthy script. In general I was aiming for clarity over brevity, that said, I think the functions are generally of a terse style.

Post Reply