Skip to content

Commit dbf6e30

Browse files
committed
Ubuntu 24.04 1.3.1.1 Ensure AppArmor is installed
1 parent f1d163c commit dbf6e30

File tree

3 files changed

+22
-4
lines changed

3 files changed

+22
-4
lines changed

components/apparmor.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,4 +10,5 @@ rules:
1010
- apparmor_configured
1111
- grub2_enable_apparmor
1212
- package_apparmor_installed
13+
- package_apparmor-utils_installed
1314
- package_pam_apparmor_installed

controls/cis_ubuntu2404.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -368,11 +368,11 @@ controls:
368368
levels:
369369
- l1_server
370370
- l1_workstation
371-
related_rules:
371+
rules:
372372
- package_apparmor_installed
373-
status: planned
374-
notes: TODO. Partial/incorrect implementation exists.See related rules. Analogous to ubuntu2204/1.6.1.1.
375-
373+
- package_apparmor-utils_installed
374+
status: automated
375+
376376
- id: 1.3.1.2
377377
title: Ensure AppArmor is enabled in the bootloader configuration (Automated)
378378
levels:
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
documentation_complete: true
2+
3+
title: 'Ensure AppArmor Utils is installed'
4+
5+
description: |-
6+
AppArmor provide Mandatory Access Controls.
7+
8+
rationale: |-
9+
Without a Mandatory Access Control system installed only the default
10+
Discretionary Access Control system will be available.
11+
12+
severity: medium
13+
14+
template:
15+
name: package_installed
16+
vars:
17+
pkgname: apparmor-utils

0 commit comments

Comments
 (0)