Skip to content

Commit

Permalink
Fix aide setup instruction + SSH v2 check (#448)
Browse files Browse the repository at this point in the history
More fixes to the Linux policy

---------

Signed-off-by: Tim Smith <[email protected]>
  • Loading branch information
tas50 authored Nov 18, 2024
1 parent 0aea99d commit 4c55cf8
Showing 1 changed file with 23 additions and 7 deletions.
30 changes: 23 additions & 7 deletions core/mondoo-linux-security.mql.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -206,7 +206,7 @@ queries:
yum install aide
```
### Debian/Ubuntu
### Debian/Ubuntu and derivatives
```
apt-get install aide
```
Expand All @@ -221,9 +221,7 @@ queries:
Initialize AIDE:
```
aide --init
mv /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz
aideinit
```
- uid: mondoo-linux-security-filesystem-integrity-is-regularly-checked
title: Ensure filesystem integrity is regularly checked
Expand Down Expand Up @@ -2182,7 +2180,7 @@ queries:
yum install rsyslog
```
### Debian/Ubuntu
### Debian/Ubuntu and derivatives
```
apt-get install rsyslog
```
Expand Down Expand Up @@ -2235,6 +2233,12 @@ queries:
```
ForwardToSyslog=yes
```
Restart the service to load the new configuration values:
```
systemctl restart systemd-journald
```
- uid: mondoo-linux-security-journald-is-configured-to-compress-large-log-files
title: Ensure journald is configured to compress large log files
impact: 50
Expand All @@ -2252,6 +2256,12 @@ queries:
```
Compress=yes
```
Restart the service to load the new configuration values:
```
systemctl restart systemd-journald
```
- uid: mondoo-linux-security-journald-is-configured-to-write-logfiles-to-persistent-disk
title: Ensure journald is configured to write logfiles to persistent disk
impact: 50
Expand All @@ -2269,6 +2279,12 @@ queries:
```
Storage=persistent
```
Restart the service to load the new configuration values:
```
systemctl restart systemd-journald
```
- uid: mondoo-linux-security-permissions-on-all-logfiles-are-configured
title: Ensure secure permissions on all log files are set
impact: 80
Expand Down Expand Up @@ -2367,7 +2383,7 @@ queries:
title: Ensure SSH Protocol is set to 2
impact: 80
# openssh-server 7.6 and later remove support for protocol v1
filters: package('openssh-server').version == /6./ || package('openssh-server').version == /7\.[0|1|2|3|4|5]/
filters: package('openssh-server').version == /6\./ || package('openssh-server').version == /7\.[0|1|2|3|4|5]/
mql: |
sshd.config.params["Protocol"] == 2
docs:
Expand Down Expand Up @@ -2580,7 +2596,7 @@ queries:
KexAlgorithms [email protected],[email protected],diffie-hellman-group18-sha512
```
openssh-server version 8.6 to 9:
openssh-server version 8.6 or later:
```
KexAlgorithms [email protected],[email protected],diffie-hellman-group18-sha512
Expand Down

0 comments on commit 4c55cf8

Please sign in to comment.