Ansible Automation | Apply CIS Security BenchMarking for RHEL/ CentOS 6

[@miguelbrostrom1182]

How much configuration is necessary to make this work for Cent OS 7? Or are the benchmarks completely different.

[@YogeshMehta]

In RHEL7 - there are changes to filesystem/service and many more. so I assume around 20-30% changes in the checks

[@kifalahmad]

Hi Yogesh,Do you have a gitHub repo link to download CIS Benchmark for Rhel/CentOS 7 ?

[@abhisheksurwariya]

Can you share the same for Ubuntu 16.04, it would be a great help if you share any link to start with.

[@smakintel]

Thanks Bro , really benefited from your tutorial. Keep it up.

[@vasudevn4986]

Hi Yogesh, thanks for the excellent job you doing. However, when I have tried to run the playbook getting below error. Please suggest where I'm doing wrong.
[root@webserver1 cis-rhel-ansible]# ansible-playbook playbook.yml -i hosts --tags section8
PLAY [all] *********************************************************************
TASK [setup] *******************************************************************
[DEPRECATION WARNING]: Accelerated mode is deprecated. Consider using SSH with ControlPersist and pipelining enabled instead.
This feature will be removed in a future
release. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
[DEPRECATION WARNING]: accelerate is kept for backwards compatibility but usage is discouraged. The module documentation details page may explain more about this
rationale..
This feature will be removed in a future release. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
fatal: [192.168.1.84]: FAILED! => {"failed": true, "msg": "Failed to connect to 192.168.1.84 on the accelerated port 5099"}
to retry, use: --limit @/etc/ansible/cis-rhel-ansible/playbook.retry
PLAY RECAP *********************************************************************
192.168.1.84 : ok=0 changed=0 unreachable=0 failed=1
[root@webserver1 cis-rhel-ansible]#
[root@webserver1 cis-rhel-ansible]# cat hosts
[rhel-6.8]
192.168.1.84
[root@webserver1 cis-rhel-ansible]#
Thanks,
Vasudev

[@YogeshMehta]

Accelerated mode is deprecated and you can do the same work with enabling ssh pipeline. Disable Accelerated in Ansible config .
/etc/ansible/ansible.cfg add below lines.
pipelining = True

[@vasudevn4986]

Hi Yogesh,
Whenever you get a chance please look into this issue.
Thanks,
Vasudev