RHEL8 CIS - 2.0.0

• audit updates

  • pre and post and format type updates
  • #323 thanks to @cobrin preserve copied audit files permissions
  • python 3 only
  • Improvements for workflow and new pipeline methods
  • README updated with badges and labels to use the new workflow

• pre-commit added and several checks, pre-commit-ci added to repo to ensure content

  • README updated

• Updates to container discovery and usage within benchmark

• linting

• aligned ansible version to 2.10.1 +

• home directories files change links

  • #322 thanks to @mballon

• #304

  • improve passwd check for user only is using sudo thanks to manish on discord community for highlighting issue.

thanks to @bbaassssiiee

• removed legacy tcp_wrappers information
  • #298
• disable ipv6 options
  • #299
  • disable ipv6 for sshd - rhel8cis_ipv6_sshd_disable: false (default) - added to prelim
  • disable ipv6 for chrony - rhel8cis_ipv6_chrony_disable: false (default) - added to prelim
  • turn off ipv6 for localhost - rhel8cis_ipv6_disable_localhost: false (default) - refer https://access.redhat.com/solutions/8709
  • #306
  • #295 crypto policy option updates
  • #296
• journald
• #320 thanks to @bbbbaassiieeee set files even if rsyslog chosen

What's Changed

• Fix for 3.1.3 and premediation/postmediation script calls by @cf-sewe in #317
• updated discord link by @uk-bolly in #318
• Alignment by @uk-bolly in #321
• Oct23 issues by @uk-bolly in #325
• updated the workflow version and galaxy setup by @uk-bolly in #328
• main release by @uk-bolly in #327
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #330
• Formatted task name fields to match playbook format by @BillSkiCO in #331
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #332
• [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #333
• Main Release by @uk-bolly in #334

New Contributors

• @pre-commit-ci made their first contribution in #330
• @BillSkiCO made their first contribution in #331

Full Changelog: 2.5.1...2.5.2