How to exclude recommendations from being applied in a CIS Build Kit for Linux environments
Product Name
CIS Build Kit
Product Version
Linux
Date
Apr 20, 2022
Problem
I have added recommendations to the exclusions.txt file that comes with a Linux-based CIS Build Kit, but the recommendations are still being applied.
Solution
Due to a bug in the some of the Linux-based Build Kit shell scripts, the exclusions.txt file does not work as intended. To exclude the recommendations you have to comment out or remove those recommendations from the Build Kit shell script file that ends in .sh.
In the UBUNTU2004_LBK.sh script file that is seen below, recommendation 1.1.1.1 is still commented out (i.e., the # remains in front of each line of the recommendation), but recommendation 1.1.1.2 is not commented out (i.e., no # symbol in front of each line of the recommendation); therefore, when the Build Kit shell script (UBUNTU2004_LBK.sh) is run, 1.1.1.1 will be excluded and 1.1.1.2 will be applied.
Please be sure to read the READ_ME.txt file for information on how to apply the recommendations. The READ_ME.txt is not included in all Linux CIS Build Kit bundles; however, it can be downloaded separately in CIS WorkBench.
Keywords; Build Kit recommendations exclusion exclude apply linux
Content by Label