Skip to content

maxvt/cis-ubuntu-16.04-benchmark

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

25 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

CIS Ubuntu Linux 16.04 LTS Benchmark v1.1.0 InSpec Profile

This is based on https://github.com/wunzeco/cis-ubuntu-14.04-benchmark which does not have an associated license. Use at your own risk.

This example shows the implementation of an InSpec profile.

Description

This profile implements the CIS Ubuntu Linux 16.04 LTS Benchmark (v1.1.0)

How to run this inspec exec remotely

cd cis-ubuntu-16.04-benchmark
inspec exec ./ -t $SSHCONN -i $SSHKEY --sudo --format=progress

To compute compliance score you could run inspec exec like below

inspec exec ./ -t $SSHCONN -i $SSHKEY --sudo --format=progress \
    | grep -E 'examples.*failures.*pending' \
    | awk '{ s = 100 * ($1 - $3) / $1; print "Summary: " $0 "\nCompliance score: " s "%" }'

Or for a local run

inspec exec <cis_benchmark_test_dir> --format=progress \
  | grep -E 'examples.*failures.*pending' \
  | awk '{ s = 100 * ($1 - $3) / $1; print "Summary: " $0 "\n%Compliance: " s }'

About

An adaptation of @wunzeco's Trusty benchmark to Xenial.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published