goss.yml

gossfile:
  {{ if .Vars.ubtu22cis_section1 }}
  section_1/*/*.yml: {}
  {{ end }}

 # Section 2
  {{ if .Vars.ubtu22cis_section2 }}
  section_2/cis_2.1/cis_2.1.1.1.yml: {}
    {{ if eq .Vars.ubtu22cis_time_service "chrony" }}
  section_2/cis_2.1/cis_2.1.2.*.yml: {}
    {{ end }}
    {{ if eq .Vars.ubtu22cis_time_service "timesyncd" }}
  section_2/cis_2.1/cis_2.1.3.*.yml: {}
    {{ end }}
    {{ if eq .Vars.ubtu22cis_time_service "ntp" }}
  section_2/cis_2.1/cis_2.1.4.*.yml: {}
    {{ end }}
  # Special Services
  section_2/cis_2.2/*.yml: {}
  # Client Service
  section_2/cis_2.3/*.yml: {}
  # Essential service
  section_2/cis_2.4/*.yml: {}
  {{ end }}

# Section 3
  {{ if .Vars.ubtu22cis_section3 }}
  section_3/cis_3.1/*.yml: {}
  section_3/cis_3.2/*.yml: {}
  section_3/cis_3.3/*.yml: {}
    {{ if .Vars.ubtu22cis_ipv6_required }}
  section_3/cis_3.3/ipv6/*.yml: {}
    {{ end }}
  section_3/cis_3.4/*.yml: {}
    # If ufw firewall
    {{ if eq .Vars.ubtu22cis_firewall "ufw" }}
  section_3/cis_3.5.1/*.yml: {}
    {{ end }}
    # If nftables firewall
    {{ if eq .Vars.ubtu22cis_firewall "nftables" }}
  section_3/cis_3.5.2/*.yml: {}
    {{ end }}
    # If iptables firewall
    {{ if eq .Vars.ubtu22cis_firewall "iptables" }}
  section_3/cis_3.5.3/*.yml: {}
    {{ end }}
  {{ end }}

# Section 4
  {{ if .Vars.ubtu22cis_section4 }}
  # Auditd and level 2
    {{ if .Vars.ubtu22cis_level_2 }}
      {{ if .Vars.ubtu22cis_auditd }}
  section_4/cis_4.1.1/*.yml: {}
  section_4/cis_4.1.2/*.yml: {}
  section_4/cis_4.1.3/*.yml: {}
  section_4/cis_4.1.4/*.yml: {}
      {{ end }}
    {{ end }}
    {{ if eq .Vars.ubtu22cis_syslog_service "journald" }}
  section_4/cis_4.2.1/*.yml: {}
    {{ end }}
    {{ if eq .Vars.ubtu22cis_syslog_service "rsyslog" }}
  section_4/cis_4.2.2/*.yml: {}
    {{ end }}
  {{ end }}

# Section 5
  {{ if .Vars.ubtu22cis_section5 }}
  section_5/*/*.yml: {}
  {{ end }}

# Section 6
  {{ if .Vars.ubtu22cis_section6 }}
  section_6/*/*.yml: {}
  {{ end }}

# Metadata
command:
  benchmark_meta:
    title: Benchmark MetaData
    exec: echo BenchMark MetaData
    exit-status: 0
    meta:
      host_machine_uuid: {{ .Vars.machine_uuid }}
      host_epoch: {{ .Vars.epoch }}
      host_os_locale: {{ .Vars.os_locale }}
      host_os_release: {{ .Vars.os_release }}
      host_os_distribution: {{ .Vars.os_distribution }}
      host_automation_group: {{ .Vars.auto_group }}
      host_hostname: {{ .Vars.os_hostname }}
      host_system_type: {{ .Vars.system_type }}
      benchmark_type: {{ .Vars.benchmark_type }}
      benchmark_version: {{ .Vars.benchmark_version }}
      benchmark_os: {{ .Vars.benchmark_os }}