Support #381
Updated by Charles N 1 day ago
Parent/umbrella: #311 (OAM - Security Hardening Auditing and Compliance). Finish system hardening to pass the CIS Debian 13 (trixie) benchmark checklist as reported by Wazuh SCA. ## Scope - [ ] Finish SSH config tweaks to pass CIS Debian 13 checklist - [ ] Finish auditd/journald config to pass CIS checklist - [ ] Synthesize upstream CIS sources into KNELIAC roles: - https://github.com/ansible-lockdown/DEBIAN12-CIS - https://github.com/ovh/debian-cis - https://www.cisecurity.org/benchmark/debian_linux - [ ] Validate against CIS checklist in Wazuh dashboard - [ ] Promote validated roles from sectestbed-* to prod ## Context - Roles executed via tsys-awx (AWX). - Validate in sectestbed-* before prod. - Partial work done: SSH hardening via KNELIAC security_ssh role. ## Dependencies Depends on #379 #1 (test lab). **Blocks** #382 #4 (STIG/SCAP), #383 #5 (audit tooling), #389 #11 (Greenbone).