)]}' { "log": [ { "commit": "75a4eb54a616cfb087079124d342f25af2aa53bc", "tree": "1cbf589619a1298b24d0095c928b41b5c495e055", "parents": [ "ad85db09b0b8d9c708bf0e2ecd56f77c7bdf1db1" ], "author": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Wed Aug 22 16:32:04 2018 +0300" }, "committer": { "name": "azvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Wed Aug 22 16:32:49 2018 +0300" }, "message": "Disable cis-3-3-3 rule\n\nChange-Id: I956da1f26e500eae693827ed5dce0f7e65e291bc\nCloses-Bug: PROD-22520 (PROD:22520)\n" }, { "commit": "ad85db09b0b8d9c708bf0e2ecd56f77c7bdf1db1", "tree": "bc9277d5416fdc2f3dfe9bebd418ad1912f47895", "parents": [ "af730f9602bd9a81d1a22fa3bec80e63a661d534" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Wed Aug 22 12:46:08 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Wed Aug 22 12:46:08 2018 +0300" }, "message": "Remove non-existent CIS items\n\nChange-Id: I91bfb8e2a06fc0499addd376db9e38483a6756d0\n" }, { "commit": "af730f9602bd9a81d1a22fa3bec80e63a661d534", "tree": "ac944a3eb0470ed55237243857aff1da3337e0ba", "parents": [ "cf1b5b322a077dc8d6f9bf5b36a7a0a71a2b3a06" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Aug 16 11:29:55 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Tue Aug 21 10:29:33 2018 +0300" }, "message": "CIS compliance (sysctl, limits)\n\n* CIS 1.5.1 Ensure core dumps are restricted\n* CIS 1.5.3 Ensure address space layout randomization (ASLR) is enabled\n* CIS 3.1.2 Ensure packet redirect sending is disabled\n* CIS 3.2.1 Ensure source routed packets are not accepted\n* CIS 3.2.2 Ensure ICMP redirects are not accepted\n* CIS 3.2.3 Ensure secure ICMP redirects are not accepted\n* CIS 3.2.4 Ensure suspicious packets are logged\n* CIS 3.2.5 Ensure broadcast ICMP requests are ignored\n* CIS 3.2.6 Ensure bogus ICMP responses are ignored\n* CIS 3.2.7 Ensure Reverse Path Filtering is enabled\n* CIS 3.2.8 Ensure TCP SYN Cookies is enabled\n\nAll sysctls are valid for Ubuntu 14.04, Ubuntu 16.04.\n\nChange-Id: I48f34c55d97a78c253d4810db46b2a04ff5c0c1a\n" }, { "commit": "cf1b5b322a077dc8d6f9bf5b36a7a0a71a2b3a06", "tree": "f3252b4da96fa722d7994b1dff1d6526ebd81461", "parents": [ "d87f461319b5b7c2dbb6d4160773c9d4abf046f3" ], "author": { "name": "Aleksey Zvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Mon Aug 20 15:13:23 2018 +0000" }, "committer": { "name": "Aleksey Zvyagintsev", "email": "azvyagintsev@mirantis.com", "time": "Mon Aug 20 15:13:23 2018 +0000" }, "message": "Revert \"CIS compliance (modprobe.d)\"\n\nThis reverts commit d87f461319b5b7c2dbb6d4160773c9d4abf046f3.\n\nChange-Id: If175b29f2e130ecf5041e7b0be20f15485089ffa\n" }, { "commit": "d87f461319b5b7c2dbb6d4160773c9d4abf046f3", "tree": "6d56e2c40bb026e6b229d1173c64107569d46376", "parents": [ "809834c85eba328b2c4f3509542a9aa7c9413c72" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Thu Aug 16 11:29:55 2018 +0300" }, "committer": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Mon Aug 20 13:05:41 2018 +0300" }, "message": "CIS compliance (modprobe.d)\n\n* CIS 1.1.1.1 Ensure mounting of cramfs filesystems is disabled\n* CIS 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled\n* CIS 1.1.1.3 Ensure mounting of jffs2 filesystems is disabled\n* CIS 1.1.1.4 Ensure mounting of hfs filesystems is disabled\n* CIS 1.1.1.5 Ensure mounting of hfsplus filesystems is disabled\n* CIS 1.1.1.6 Ensure mounting of squashfs filesystems is disabled\n* CIS 1.1.1.7 Ensure mounting of udf filesystems is disabled\n* CIS 1.1.1.8 Ensure mounting of FAT filesystems is disabled\n* CIS 3.5.1 Ensure DCCP is disabled\n* CIS 3.5.2 Ensure SCTP is disabled\n* CIS 3.5.3 Ensure RDS is disabled\n* CIS 3.5.4 Ensure TIPC is disabled\n\nRelated-Prod: PROD-20756\nRelated-Prod: PROD-20757\nRelated-Prod: PROD-20758\nRelated-Prod: PROD-20759\n\nChange-Id: I719984829978caf0401e78daaabf1adfb0d1cfdf\n" }, { "commit": "cc7263a275e6ce0b6c249240217ec6bfc39af05e", "tree": "e441139347edbcd0da06aaa9ba5a0f97c55a4e35", "parents": [ "7903ba97da7cd57176479cb0b39beb937de94ebd" ], "author": { "name": "Dmitry Teselkin", "email": "dteselkin@mirantis.com", "time": "Wed Aug 15 14:55:50 2018 +0300" }, "committer": { "name": "Vasyl Saienko", "email": "vsaienko@mirantis.com", "time": "Thu Aug 16 07:23:55 2018 +0000" }, "message": "CIS 3.3.3 Ensure IPv6 is disabled\n\nRelated-Prod: PROD-20755\n\nChange-Id: I44cc3bdb4a0436ff17f790a828d03697b89d3520\n" }, { "commit": "25839cca97f12ffba38b8ca63bff3f83330f9cb8", "tree": "a7f8551dd5e575393fe874afe42bdfa3645b87bb", "parents": [ "361d69943b777aaaff12f7c70ae68f07ac633240" ], "author": { "name": "Jiri Broulik", "email": "jiribroulik@gmail.com", "time": "Tue Apr 18 17:05:20 2017 +0200" }, "committer": { "name": "Jiri Broulik", "email": "jiribroulik@gmail.com", "time": "Wed Apr 19 09:38:20 2017 +0200" }, "message": "purging repos\n" }, { "commit": "3a9faa53ed20eebba26b2c10d624b009a73f808a", "tree": "3212e289f89d6dda0aa5d23c089e37b0e891f802", "parents": [ "0aaf5affa08286a51d5fd63bbc7881abfcf7d1a5" ], "author": { "name": "Ales Komarek", "email": "ales.komarek@tcpcloud.eu", "time": "Mon May 23 11:58:32 2016 +0200" }, "committer": { "name": "Ales Komarek", "email": "ales.komarek@tcpcloud.eu", "time": "Mon May 23 11:58:32 2016 +0200" }, "message": "Container metadata\n" }, { "commit": "cbe08a2eec71b867ff91d202cca35d6bf299d549", "tree": "b1fbe573b6675d625ed845a527d74121c70fef30", "parents": [ "a24b9af5ec86b7feeeeab134b4358540729318cf" ], "author": { "name": "Ales Komarek", "email": "mail@newt.cz", "time": "Thu Nov 26 10:45:34 2015 +0100" }, "committer": { "name": "Ales Komarek", "email": "mail@newt.cz", "time": "Thu Nov 26 10:45:34 2015 +0100" }, "message": "New parameteters\n" }, { "commit": "a24b9af5ec86b7feeeeab134b4358540729318cf", "tree": "e5e0d3b9da38067cf381c638b4b1f1ffae0a58ce", "parents": [ "d8fee8492b8489ef3b662324bcfac16a5be15c15" ], "author": { "name": "jan kaufman", "email": "jan.kaufman@tcpcloud.eu", "time": "Wed Nov 25 13:01:20 2015 +0100" }, "committer": { "name": "jan kaufman", "email": "jan.kaufman@tcpcloud.eu", "time": "Wed Nov 25 13:01:20 2015 +0100" }, "message": "disable heka logging for now\n" }, { "commit": "d8fee8492b8489ef3b662324bcfac16a5be15c15", "tree": "6a01849e956889e1b11fc390e0f20843651fc647", "parents": [ "8759eee004ec1cff2b0430849adb0078934ee79b" ], "author": { "name": "Ales Komarek", "email": "mail@newt.cz", "time": "Wed Nov 25 11:20:39 2015 +0100" }, "committer": { "name": "Ales Komarek", "email": "mail@newt.cz", "time": "Wed Nov 25 11:20:39 2015 +0100" }, "message": "Monitoring metadata, mount dont create fs for nfs\n" }, { "commit": "f5383a44be710022e88fc14df049b58b250f3773", "tree": "1ce10f53c8bfcd4fc24489c87b8e6770225fb88b", "parents": [], "author": { "name": "Filip Pytloun", "email": "filip@pytloun.cz", "time": "Tue Oct 06 16:28:32 2015 +0200" }, "committer": { "name": "Filip Pytloun", "email": "filip@pytloun.cz", "time": "Tue Oct 06 16:40:56 2015 +0200" }, "message": "Initial commit\n" } ] }