ghost
64e1e8adb4
chore: sign templates 🤖
2026-08-01 10:03:16 +00:00
pussycat0x
ade4713391
Merge pull request #16581 from Th3l0newolf/ubuntu-phase-4-CIS
...
Ubuntu CIS Phase 4 Templates
2026-08-01 15:32:46 +05:30
ghost
31ff84e435
chore: sign templates 🤖
2026-07-28 10:47:00 +00:00
Jiho Lee
9c1b4fea4d
fix: replace an unsupported lookahead that made the template fail to load
...
The invalid-owner matcher uses a negative lookahead:
^\\S+\\s+\\S+\\s+(?!root|.*EXPECTED_USER=)
Go's RE2 has no lookahead, so this never compiles and the whole template
is dropped at load:
Could not parse template home-env-permission.yaml: could not compile
request: cause="could not compile regex: ^\\S+\\s+\\S+\\s+(?!root|...)"
Found 1 templates with runtime error
Neither of the two matchers ever runs, so the check has never worked.
The comparison it wants -- owner is neither root nor the expected user --
cannot be expressed in RE2 at all, since it relates two fields of the
same line. The shell pipeline already knows both, so awk marks the line
and the matcher looks for that marker instead.
Verified against sample ls -l output: only the foreign-owner row is
flagged; rows owned by root or by the expected user are not.
-rw-r--r-- 1 mallory mallory ... EXPECTED_USER=bob -> INVALID_OWNER
-rw-r--r-- 1 alice alice ... EXPECTED_USER=alice -> not flagged
-rw-r--r-- 1 root root ... EXPECTED_USER=alice -> not flagged
Before: template dropped with a compile error.
After: loads with no runtime error.
Found by scanning every regex in the repo: 10088 patterns across 13451
templates, this was the only one Go cannot compile.
2026-07-27 00:03:40 +09:00
Th3l0newolf [ Chinmay Divekar]
cd95a969ff
Add files via upload
2026-07-15 22:28:59 -07:00
ghost
fc254a067f
chore: sign templates 🤖
2025-08-29 10:06:03 +00:00
pussycat0x
f94b45a129
Local tag - update
2025-08-28 23:41:32 +05:30
ghost
aa5379b2eb
chore: sign templates 🤖
2025-08-27 03:24:08 +00:00
Dhiyaneshwaran
38f1ebf515
Merge branch 'main' into pr5-home-ownerless-worldwrite
2025-08-26 20:15:59 -07:00
pussycat0x
6783cd0853
Update & Dir changes
2025-08-25 20:46:27 +05:30
ghost
4090d1f9da
chore: sign templates 🤖
2025-08-25 08:40:26 +00:00
MaineK00n
1d49759282
fix: add space for list item in tcpwrapper-access.yaml
2025-08-25 17:30:06 +09:00
ghost
2f07b74800
chore: sign templates 🤖
2025-08-24 07:06:30 +00:00
Dhiyaneshwaran
bb5e94165a
Merge pull request #12836 from songyaeji/pr6-suid-sgid-check
...
Add SUID/SGID sticky bit check template
2025-08-24 00:06:10 -07:00
ghost
8ca11c3553
chore: sign templates 🤖
2025-08-24 07:05:38 +00:00
Dhiyaneshwaran
5924fadaf8
Merge pull request #12849 from songyaeji/pr14-sendmail-smtp
...
Add Sendmail/SMTP and DNS related security check templates
2025-08-24 00:05:16 -07:00
pussycat0x
529dc87a72
name - update
2025-08-24 12:30:39 +05:30
pussycat0x
760cd5c9b0
minor - change
2025-08-24 12:29:35 +05:30
pussycat0x
0b5ffee336
Update suid-sgid-check.yaml
2025-08-24 12:11:26 +05:30
ghost
3226a2c551
chore: sign templates 🤖
2025-08-23 11:50:45 +00:00
Dhiyaneshwaran
53892099ec
Merge pull request #12839 from songyaeji/pr9-hosts-nfs-checks
...
Add templates to check hosts access control and NFS configuration
2025-08-23 04:50:23 -07:00
ghost
082113c69a
chore: sign templates 🤖
2025-08-23 08:02:48 +00:00
Ritik Chaddha
97c466c65f
Merge pull request #12837 from songyaeji/pr7-ftp-automount
...
Add templates to detect FTP anonymous access and automount service status
2025-08-23 13:32:28 +05:30
ghost
d633920257
chore: sign templates 🤖
2025-08-23 07:59:46 +00:00
Ritik Chaddha
abc2c84e99
Merge pull request #12845 from songyaeji/pr12-unnecessary-rpc-check
...
Add template to check unnecessary RPC services
2025-08-23 13:29:25 +05:30
Ritik Chaddha
374996d133
Merge pull request #12844 from songyaeji/pr11-xinetd-services-checks
...
Add templates to check Xinetd finger, tftp, and talk service configuration
2025-08-23 13:29:19 +05:30
Ritik Chaddha
7088c79b61
lint fix
2025-08-23 13:27:57 +05:30
Dhiyaneshwaran
4a73017354
Merge branch 'main' into pr6-suid-sgid-check
2025-08-22 23:54:11 -07:00
Dhiyaneshwaran
49ce9ec857
Merge branch 'main' into pr14-sendmail-smtp
2025-08-22 23:52:00 -07:00
pussycat0x
3a72ef4dbd
Update tcpwrapper-access.yaml
2025-08-23 12:21:00 +05:30
ghost
ec0e74ef96
chore: sign templates 🤖
2025-08-23 06:50:02 +00:00
Dhiyaneshwaran
91d3ce64f0
Merge branch 'main' into pr8-cron-dos-checks
2025-08-22 23:39:40 -07:00
ghost
80e82ece2a
chore: sign templates 🤖
2025-08-23 06:34:08 +00:00
pussycat0x
938ca9205c
minor - update
2025-08-23 01:58:14 +05:30
pussycat0x
e97faa0bd0
tags - update
2025-08-22 17:58:20 +05:30
pussycat0x
61f1d0081b
Directory & Templates - update
2025-08-22 17:56:12 +05:30
pussycat0x
0c6576c146
Update linux-automountd-enabled.yaml
2025-08-22 17:45:50 +05:30
pussycat0x
07c597d6d1
Update linux-anonymous-ftp-enabled.yaml
2025-08-22 14:34:48 +05:30
Dhiyaneshwaran
b3ae91592f
Merge branch 'main' into pr9-hosts-nfs-checks
2025-08-21 23:06:14 -07:00
Dhiyaneshwaran
8db6d56222
Merge branch 'main' into pr10-nis-rcommands-checks
2025-08-21 23:06:10 -07:00
Dhiyaneshwaran
4e40296cb9
Merge branch 'main' into pr11-xinetd-services-checks
2025-08-21 23:06:00 -07:00
Dhiyaneshwaran
c8c0ff8d4b
Merge branch 'main' into pr12-unnecessary-rpc-check
2025-08-21 23:05:50 -07:00
pussycat0x
a790a5946b
Templates - updates && Dir - Changes
2025-08-22 11:09:39 +05:30
pussycat0x
69080d8937
Update tftp-service-enabled.yaml
2025-08-22 10:24:23 +05:30
pussycat0x
d1a1dd445c
Template - Update & Dir - Changes
2025-08-22 10:22:38 +05:30
pussycat0x
0b0939f0b0
dir -changes && template - update
2025-08-21 23:48:18 +05:30
pussycat0x
b23283d3fa
Template - update & Dir - change
2025-08-21 23:10:49 +05:30
pussycat0x
61e8953107
dir - changed & template update
2025-08-21 23:02:09 +05:30
ghost
814b1b169f
chore: sign templates 🤖
2025-08-21 12:45:03 +00:00
Dhiyaneshwaran
7e6ebb1630
Merge pull request #12826 from songyaeji/pr1-account-policy
...
Add templates for account lockout and password aging policy checks
2025-08-21 04:52:47 -07:00
ghost