This repository is set of configuration files and directories to run the audit of the relevant benchmark of RHEL 9 servers
This is configured in a directory structure level.
file: vars/{benchmark_type}.yml
Please refer to the file for all options and their meanings
The listed variable for every control/benchmark can be turned on/off or section
-
Other controls
- enable_selinux
- run_heavy_tasks
-
Bespoke options
If a site has specific options e.g. password complexity these can also be set.
goss >= 0.4.4 root privileges
If running as part of the ansible playbook, this will pull in the relevant branch for the version of benchmark you are remediating.
- e.g. v1.0.0 will pull in branch benchmark-v1.0.0
Devel is normally the latest benchmark version, so maybe different from the version of benchmark you wish to test. Details will show in the README as part of the remediation as to the benchmark for the version it is written for.
Fot the latest information on audit and how it can be used please visit
If you want to run locally and see easy output of failures, the following command helps ability to add your own requirements are available in several sections.
- Goss
- Goss documentation
- Centre For Internet Security