Skip to content

[Debian12] Add support debian and change logic platform for host based firewall #13059

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Closed
wants to merge 12 commits into from
Closed

[Debian12] Add support debian and change logic platform for host based firewall #13059

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
3e372cb
[Debian12 CIS] Add Debian 12 CIS Benchmark 1.1.0 controls
Blasci Feb 15, 2025
8dbc69c
[Debian12 CIS] Add Linux Debian 12 CIS Benchmark 1.1.0 profiles
Blasci Feb 15, 2025
438b127
[Debian12 CIS] Add Debian 12 CIS reference
Blasci Feb 15, 2025
0d27299
[Debian12 CIs] Add Debian12 CIS URI constant
Blasci Feb 15, 2025
5721aed
[Debian12 CIS] Add Debian12 product stability
Blasci Feb 15, 2025
b7a76cf
[Debian12 CIS] Add support debian to ufw firewall rules
Blasci Feb 15, 2025
212a2cd
[Debian12 CIS] Add support debian to nftables firewall rules
Blasci Feb 15, 2025
7ce5fbf
[Debian12 CIS] Add support debian and platform logic to ufw firewall
Blasci Feb 16, 2025
e7345fd
[Debian12 CIS] Add support debian and platform logic to nftables fire…
Blasci Feb 16, 2025
b3a9bbc
[Debian12 CIS] Add support debian and platform logic to iptables(-per…
Blasci Feb 16, 2025
ed1a445
[Debian12 CIS] Separate package iptables and iptables-persistent
Blasci Feb 16, 2025
36b98e9
[Debian12 CIS] Add service ufw disable rule
Blasci Feb 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions components/iptables-persistent.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
name: iptables-persistent
packages:
- iptables-persistent
rules:
- package_iptables-persistent_installed
- package_iptables-persistent_removed
3 changes: 0 additions & 3 deletions components/iptables.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,16 +3,13 @@ packages:
- iptables
- iptables-ipv6
- iptables-nft
- iptables-persistent
- iptables-services
rules:
- directory_groupowner_etc_iptables
- directory_owner_etc_iptables
- directory_permissions_etc_iptables
- package_iptables-nft_installed
- package_iptables-nft_installed
- package_iptables-persistent_installed
- package_iptables-persistent_removed
- package_iptables-services_installed
- package_iptables-services_removed
- package_iptables_installed
Expand Down
1 change: 1 addition & 0 deletions components/ufw.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ rules:
- package_ufw_installed
- package_ufw_removed
- service_ufw_enabled
- service_ufw_disabled
- set_ufw_default_rule
- set_ufw_loopback_traffic
- ufw_only_required_services
Expand Down
Loading