Certain Linux Build Kits fail to execute with error "nix_fed_ensure_iptables-services_not_installed.sh [...] not a valid identifier"


Product Name

Build Kits

Product Version

Linux Build Kits

Date

Jun 22, 2022



 

Problem

While executing a CIS Linux Build Kit I am getting a number of errors and I cannot apply the Script.


Solution

  1. Navigate to the /home/[Build Kit]/[Build_KIT]_LBK/functions/recommendations directory and delete any Recommendations which are erroring out in Terminal.

    1. Three such Recommendations are listed below. However, there may be different or additional scripts to remove.

  2. Use the full .PDF of the Benchmark which correlates to the Build Kit in question to manually remediate the skipped Recommendations.

 

 

Additionally, if you have not already, please:

  1. Join the Appropriate CIS Workbench Linux Community for the Build Kit in question

  2. Search for, or start, a discussion around this topic. Since our Benchmarks are community driven, it is possible someone has already started a similar discussion.

    • These workbench discussions are with other community members and occasionally Developers and Benchmark Leads. They take suggestions and concerns into consideration as they develop future Benchmark and Benchmark revisions. It isn’t a ticketing-based system and responses are not guaranteed.

    • If you have the time, we always encourage Members to join the WorkBench Communities and volunteer as contributors and testers for upcoming product release. Please feel free to post any relevant questions in the Discussion area, or if you have found a problem with a specific Benchmark and/or Recommendation, you can create a Ticket for it right within the WorkBench Community.

      • For more information on Discussions, Tickets, and the overall Benchmarks Development Process please review this guide.

  3. Set up notifications for the community in order to participate in this Discussion and receive alerts about new Build Kits, Benchmarks, and other discussions.

 

Keywords; Build Kit nix_fed_ensure_iptables-services CentOS RHEL

Content by Label


Copyright © 2022

Center for Internet Security®