)]}'
{
  "log": [
    {
      "commit": "1cd80ba3e51f7fccae6dfbbba916da97541b0b73",
      "tree": "de947216d09231b416ecdcf0beee8acf37dfb034",
      "parents": [
        "4416e363a48ec06eaafa6f9f434d85bcc0876dad"
      ],
      "author": {
        "name": "Ivan Udovichenko",
        "email": "iudovichenko@mirantis.com",
        "time": "Wed Dec 19 02:28:24 2018 +0300"
      },
      "committer": {
        "name": "Ivan Udovichenko",
        "email": "iudovichenko@mirantis.com",
        "time": "Wed Dec 19 02:31:01 2018 +0300"
      },
      "message": "Change device file system\n\nshm file system does not exist on the target OS (Ubuntu 16.04),\nbut tmpfs does.\n\nPROD-25485 (PROD:25485)\n\nChange-Id: I6a5b4802b92159f6f2e16757d6340a2fd7d8beae\n"
    },
    {
      "commit": "dda5fab96866d1684e0f9b5a3173b8bde196c341",
      "tree": "c0cf36c9b4a67adae4431569b2289947aaac2ad0",
      "parents": [
        "e4ea94f1bbc5430d0d1138c85837cc6948d0f3f0"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Tue Oct 02 15:59:52 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Tue Oct 02 16:32:44 2018 +0300"
      },
      "message": "Drop CIS 5.4.1.4\n\nCIS 5.4.1.4 should be configured in /etc/default/useradd\n\ncis-5-4-1-4.yml attempts to configure this item in\npillar that relates to /etc/login.defs and should be removed.\n\nRelated-Prod: PROD-23600\n\nChange-Id: Iea93a54a44df919c07001fc02e3551276ef9583c\n"
    },
    {
      "commit": "579f6df95c1b46c4d5b4839eda17a13f49b2f8a3",
      "tree": "8aa92407e528e1c537d410c1be4f311d93af15fb",
      "parents": [
        "bf79ba4369955f42511ad655fa891623a38d0a65"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Fri Sep 28 16:05:30 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Fri Sep 28 16:05:05 2018 +0000"
      },
      "message": "CIS 5.4.4\n\n* 5.4.4 Ensure default user umask is 027 or more restrictive (Scored)\n\nChange-Id: Idc219e7f6e8ab4b7e3d24a36f95f8aab4eff3160\nRelated-Prod: PROD-18386\n"
    },
    {
      "commit": "bf79ba4369955f42511ad655fa891623a38d0a65",
      "tree": "4f2ea150e08d38b73dcbc9ea1591fa24575e611d",
      "parents": [
        "47e41f45c8a3d489cc290d0dd3bdaeccba266e10"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Thu Sep 27 13:56:38 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Thu Sep 27 18:00:46 2018 +0000"
      },
      "message": "CIS 5.4.1.x\n\n* CIS 5.4.1.1 Ensure password expiration is 90 days or less (Scored)\n* CIS 5.4.1.2 Ensure minimum days between password changes is 7 or more (Scored)\n* CIS 5.4.1.3 Ensure password expiration warning days is 7 or more (Scored)\n* CIS 5.4.1.4 Ensure inactive password lock is 30 days or less (Scored)\n\nRelated-Prod: PROD-18386\n\nChange-Id: I42697c31823c631acb1528ca917b39c069fb72bf\n"
    },
    {
      "commit": "def4bdd9310df03366c8826caadd629ecb67f8c8",
      "tree": "ec398aeecfa37138be813cccc4c3426d25fdb063",
      "parents": [
        "e28c250deba9cb3491175c8498b0fe601fe6afe0"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Fri Aug 17 09:41:58 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Thu Sep 13 14:22:12 2018 +0300"
      },
      "message": "CIS 1.1.21 Disable Automounting\n\nRelated-Prod: PROD-22653\n\nChange-Id: I5b389309f0cb2890cf9a9a777348efb5a9d7d735\n"
    },
    {
      "commit": "e28c250deba9cb3491175c8498b0fe601fe6afe0",
      "tree": "8813b3752740f8a952f61020855f99d8885d7d4f",
      "parents": [
        "e999baaf2b19eb46ec3da670946edae8a246c108",
        "4326d345c7b76f06386865d604c33899faaf4260"
      ],
      "author": {
        "name": "mcp-jenkins",
        "email": "mcp-jenkins@mirantis.com",
        "time": "Thu Sep 13 11:11:54 2018 +0000"
      },
      "committer": {
        "name": "Gerrit Code Review",
        "email": "gerrit2@84b5d06f6116",
        "time": "Thu Sep 13 11:11:54 2018 +0000"
      },
      "message": "Merge \"CIS compliance (packages)\""
    },
    {
      "commit": "ee7b811a6289a3d479193291c2d20db3c1b46945",
      "tree": "7b3ac10c639eb5b6e937aed6c3ee0be676f08c0b",
      "parents": [
        "e6268087382f209e69575c33058b7765af068d74"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Wed Aug 22 12:46:08 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Tue Sep 11 18:55:21 2018 +0300"
      },
      "message": "CIS compliance (modprobe.d)\n\n* CIS 1.1.1.1 Ensure mounting of cramfs filesystems is disabled\n* CIS 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled\n* CIS 1.1.1.3 Ensure mounting of jffs2 filesystems is disabled\n* CIS 1.1.1.4 Ensure mounting of hfs filesystems is disabled\n* CIS 1.1.1.5 Ensure mounting of hfsplus filesystems is disabled\n* CIS 1.1.1.6 Ensure mounting of squashfs filesystems is disabled\n* CIS 1.1.1.7 Ensure mounting of udf filesystems is disabled\n* CIS 1.1.1.8 Ensure mounting of FAT filesystems is disabled\n* CIS 3.5.1 Ensure DCCP is disabled\n* CIS 3.5.2 Ensure SCTP is disabled\n* CIS 3.5.3 Ensure RDS is disabled\n* CIS 3.5.4 Ensure TIPC is disabled\n\nRelated-Prod: PROD-20756\nRelated-Prod: PROD-20757\nRelated-Prod: PROD-20758\nRelated-Prod: PROD-20759\n\nChange-Id: Ia8bf992498ef739a4a40fb108fcb449900caf6e3\n"
    },
    {
      "commit": "e6268087382f209e69575c33058b7765af068d74",
      "tree": "63bc9b0daf2ffd97297f95be987fa40695b8b0f3",
      "parents": [
        "5f2c6ce2189edf9080d8d0a28c60e3da1110a5bf",
        "ca10ffa318c8ec6735f0b6740a9a70f9f494c1c8"
      ],
      "author": {
        "name": "mcp-jenkins",
        "email": "mcp-jenkins@mirantis.com",
        "time": "Tue Sep 11 15:51:05 2018 +0000"
      },
      "committer": {
        "name": "Gerrit Code Review",
        "email": "gerrit2@84b5d06f6116",
        "time": "Tue Sep 11 15:51:05 2018 +0000"
      },
      "message": "Merge \"CIS compliance (/dev/shm mount options)\""
    },
    {
      "commit": "4326d345c7b76f06386865d604c33899faaf4260",
      "tree": "54827d2d13a552afca40dd7386071d8ac40693a1",
      "parents": [
        "5f2c6ce2189edf9080d8d0a28c60e3da1110a5bf"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Thu Apr 26 17:21:22 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Thu Sep 06 05:50:31 2018 +0000"
      },
      "message": "CIS compliance (packages)\n\n* CIS 1.5.4 Ensure prelink is disabled\n* CIS 2.3.1 Ensure NIS Client is not installed\n* CIS 2.3.2 Ensure rsh client is not installed\n* CIS 2.3.3 Ensure talk client is not installed\n* CIS 2.3.4 Ensure telnet client is not installed\n\nChange-Id: I0eb11d39deaa28f238a2e618bf95cc248189197c\n"
    },
    {
      "commit": "ca10ffa318c8ec6735f0b6740a9a70f9f494c1c8",
      "tree": "2a502df78483ae602001f36bd9dff7c68bfbb059",
      "parents": [
        "0f084a01cee47a299fb2f60791a3296728000e55"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Tue Sep 04 18:50:53 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Wed Sep 05 11:51:07 2018 +0300"
      },
      "message": "CIS compliance (/dev/shm mount options)\n\n* CIS 1.1.14 Ensure nodev option set on /dev/shm partition (Scored)\n* CIS 1.1.15 Ensure nosuid option set on /dev/shm partition (Scored)\n* CIS 1.1.16 Ensure noexec option set on /dev/shm partition (Scored)\n\nRelated-Prod: PROD-22652\n\nChange-Id: I35f371ce36bae6104e0176f63bd43a8fc4e5bad3\n"
    },
    {
      "commit": "11ef3737d2ca10ee5bedbbb716bee5360ed3087c",
      "tree": "e2ad4f8c35239aaad97f45b7d055c450aa4bb9c0",
      "parents": [
        "0f084a01cee47a299fb2f60791a3296728000e55"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Mon Sep 03 15:32:07 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Mon Sep 03 15:32:07 2018 +0300"
      },
      "message": "CIS 6.1.2-6.1.9\n\nCIS items copied from cisbench:\n* CIS 6.1.2 Ensure permissions on /etc/passwd are configured (Scored)\n* CIS 6.1.3 Ensure permissions on /etc/shadow are configured (Scored)\n* CIS 6.1.4 Ensure permissions on /etc/group are configured (Scored)\n* CIS 6.1.5 Ensure permissions on /etc/gshadow are configured (Scored)\n* CIS 6.1.6 Ensure permissions on /etc/passwd- are configured (Scored)\n* CIS 6.1.7 Ensure permissions on /etc/shadow- are configured (Scored)\n* CIS 6.1.8 Ensure permissions on /etc/group- are configured (Scored)\n* CIS 6.1.9 Ensure permissions on /etc/gshadow- are configured (Scored)\n\nChange-Id: I195d08a98c2401a9b0fa8f146ee4b365f933fa1f\n"
    },
    {
      "commit": "75a4eb54a616cfb087079124d342f25af2aa53bc",
      "tree": "1cbf589619a1298b24d0095c928b41b5c495e055",
      "parents": [
        "ad85db09b0b8d9c708bf0e2ecd56f77c7bdf1db1"
      ],
      "author": {
        "name": "azvyagintsev",
        "email": "azvyagintsev@mirantis.com",
        "time": "Wed Aug 22 16:32:04 2018 +0300"
      },
      "committer": {
        "name": "azvyagintsev",
        "email": "azvyagintsev@mirantis.com",
        "time": "Wed Aug 22 16:32:49 2018 +0300"
      },
      "message": "Disable cis-3-3-3 rule\n\nChange-Id: I956da1f26e500eae693827ed5dce0f7e65e291bc\nCloses-Bug: PROD-22520 (PROD:22520)\n"
    },
    {
      "commit": "ad85db09b0b8d9c708bf0e2ecd56f77c7bdf1db1",
      "tree": "bc9277d5416fdc2f3dfe9bebd418ad1912f47895",
      "parents": [
        "af730f9602bd9a81d1a22fa3bec80e63a661d534"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Wed Aug 22 12:46:08 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Wed Aug 22 12:46:08 2018 +0300"
      },
      "message": "Remove non-existent CIS items\n\nChange-Id: I91bfb8e2a06fc0499addd376db9e38483a6756d0\n"
    },
    {
      "commit": "af730f9602bd9a81d1a22fa3bec80e63a661d534",
      "tree": "ac944a3eb0470ed55237243857aff1da3337e0ba",
      "parents": [
        "cf1b5b322a077dc8d6f9bf5b36a7a0a71a2b3a06"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Thu Aug 16 11:29:55 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Tue Aug 21 10:29:33 2018 +0300"
      },
      "message": "CIS compliance (sysctl, limits)\n\n* CIS 1.5.1 Ensure core dumps are restricted\n* CIS 1.5.3 Ensure address space layout randomization (ASLR) is enabled\n* CIS 3.1.2 Ensure packet redirect sending is disabled\n* CIS 3.2.1 Ensure source routed packets are not accepted\n* CIS 3.2.2 Ensure ICMP redirects are not accepted\n* CIS 3.2.3 Ensure secure ICMP redirects are not accepted\n* CIS 3.2.4 Ensure suspicious packets are logged\n* CIS 3.2.5 Ensure broadcast ICMP requests are ignored\n* CIS 3.2.6 Ensure bogus ICMP responses are ignored\n* CIS 3.2.7 Ensure Reverse Path Filtering is enabled\n* CIS 3.2.8 Ensure TCP SYN Cookies is enabled\n\nAll sysctls are valid for Ubuntu 14.04, Ubuntu 16.04.\n\nChange-Id: I48f34c55d97a78c253d4810db46b2a04ff5c0c1a\n"
    },
    {
      "commit": "cf1b5b322a077dc8d6f9bf5b36a7a0a71a2b3a06",
      "tree": "f3252b4da96fa722d7994b1dff1d6526ebd81461",
      "parents": [
        "d87f461319b5b7c2dbb6d4160773c9d4abf046f3"
      ],
      "author": {
        "name": "Aleksey Zvyagintsev",
        "email": "azvyagintsev@mirantis.com",
        "time": "Mon Aug 20 15:13:23 2018 +0000"
      },
      "committer": {
        "name": "Aleksey Zvyagintsev",
        "email": "azvyagintsev@mirantis.com",
        "time": "Mon Aug 20 15:13:23 2018 +0000"
      },
      "message": "Revert \"CIS compliance (modprobe.d)\"\n\nThis reverts commit d87f461319b5b7c2dbb6d4160773c9d4abf046f3.\n\nChange-Id: If175b29f2e130ecf5041e7b0be20f15485089ffa\n"
    },
    {
      "commit": "d87f461319b5b7c2dbb6d4160773c9d4abf046f3",
      "tree": "6d56e2c40bb026e6b229d1173c64107569d46376",
      "parents": [
        "809834c85eba328b2c4f3509542a9aa7c9413c72"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Thu Aug 16 11:29:55 2018 +0300"
      },
      "committer": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Mon Aug 20 13:05:41 2018 +0300"
      },
      "message": "CIS compliance (modprobe.d)\n\n* CIS 1.1.1.1 Ensure mounting of cramfs filesystems is disabled\n* CIS 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled\n* CIS 1.1.1.3 Ensure mounting of jffs2 filesystems is disabled\n* CIS 1.1.1.4 Ensure mounting of hfs filesystems is disabled\n* CIS 1.1.1.5 Ensure mounting of hfsplus filesystems is disabled\n* CIS 1.1.1.6 Ensure mounting of squashfs filesystems is disabled\n* CIS 1.1.1.7 Ensure mounting of udf filesystems is disabled\n* CIS 1.1.1.8 Ensure mounting of FAT filesystems is disabled\n* CIS 3.5.1 Ensure DCCP is disabled\n* CIS 3.5.2 Ensure SCTP is disabled\n* CIS 3.5.3 Ensure RDS is disabled\n* CIS 3.5.4 Ensure TIPC is disabled\n\nRelated-Prod: PROD-20756\nRelated-Prod: PROD-20757\nRelated-Prod: PROD-20758\nRelated-Prod: PROD-20759\n\nChange-Id: I719984829978caf0401e78daaabf1adfb0d1cfdf\n"
    },
    {
      "commit": "cc7263a275e6ce0b6c249240217ec6bfc39af05e",
      "tree": "e441139347edbcd0da06aaa9ba5a0f97c55a4e35",
      "parents": [
        "7903ba97da7cd57176479cb0b39beb937de94ebd"
      ],
      "author": {
        "name": "Dmitry Teselkin",
        "email": "dteselkin@mirantis.com",
        "time": "Wed Aug 15 14:55:50 2018 +0300"
      },
      "committer": {
        "name": "Vasyl Saienko",
        "email": "vsaienko@mirantis.com",
        "time": "Thu Aug 16 07:23:55 2018 +0000"
      },
      "message": "CIS 3.3.3 Ensure IPv6 is disabled\n\nRelated-Prod: PROD-20755\n\nChange-Id: I44cc3bdb4a0436ff17f790a828d03697b89d3520\n"
    },
    {
      "commit": "25839cca97f12ffba38b8ca63bff3f83330f9cb8",
      "tree": "a7f8551dd5e575393fe874afe42bdfa3645b87bb",
      "parents": [
        "361d69943b777aaaff12f7c70ae68f07ac633240"
      ],
      "author": {
        "name": "Jiri Broulik",
        "email": "jiribroulik@gmail.com",
        "time": "Tue Apr 18 17:05:20 2017 +0200"
      },
      "committer": {
        "name": "Jiri Broulik",
        "email": "jiribroulik@gmail.com",
        "time": "Wed Apr 19 09:38:20 2017 +0200"
      },
      "message": "purging repos\n"
    },
    {
      "commit": "3a9faa53ed20eebba26b2c10d624b009a73f808a",
      "tree": "3212e289f89d6dda0aa5d23c089e37b0e891f802",
      "parents": [
        "0aaf5affa08286a51d5fd63bbc7881abfcf7d1a5"
      ],
      "author": {
        "name": "Ales Komarek",
        "email": "ales.komarek@tcpcloud.eu",
        "time": "Mon May 23 11:58:32 2016 +0200"
      },
      "committer": {
        "name": "Ales Komarek",
        "email": "ales.komarek@tcpcloud.eu",
        "time": "Mon May 23 11:58:32 2016 +0200"
      },
      "message": "Container metadata\n"
    },
    {
      "commit": "cbe08a2eec71b867ff91d202cca35d6bf299d549",
      "tree": "b1fbe573b6675d625ed845a527d74121c70fef30",
      "parents": [
        "a24b9af5ec86b7feeeeab134b4358540729318cf"
      ],
      "author": {
        "name": "Ales Komarek",
        "email": "mail@newt.cz",
        "time": "Thu Nov 26 10:45:34 2015 +0100"
      },
      "committer": {
        "name": "Ales Komarek",
        "email": "mail@newt.cz",
        "time": "Thu Nov 26 10:45:34 2015 +0100"
      },
      "message": "New parameteters\n"
    },
    {
      "commit": "a24b9af5ec86b7feeeeab134b4358540729318cf",
      "tree": "e5e0d3b9da38067cf381c638b4b1f1ffae0a58ce",
      "parents": [
        "d8fee8492b8489ef3b662324bcfac16a5be15c15"
      ],
      "author": {
        "name": "jan kaufman",
        "email": "jan.kaufman@tcpcloud.eu",
        "time": "Wed Nov 25 13:01:20 2015 +0100"
      },
      "committer": {
        "name": "jan kaufman",
        "email": "jan.kaufman@tcpcloud.eu",
        "time": "Wed Nov 25 13:01:20 2015 +0100"
      },
      "message": "disable heka logging for now\n"
    },
    {
      "commit": "d8fee8492b8489ef3b662324bcfac16a5be15c15",
      "tree": "6a01849e956889e1b11fc390e0f20843651fc647",
      "parents": [
        "8759eee004ec1cff2b0430849adb0078934ee79b"
      ],
      "author": {
        "name": "Ales Komarek",
        "email": "mail@newt.cz",
        "time": "Wed Nov 25 11:20:39 2015 +0100"
      },
      "committer": {
        "name": "Ales Komarek",
        "email": "mail@newt.cz",
        "time": "Wed Nov 25 11:20:39 2015 +0100"
      },
      "message": "Monitoring metadata, mount dont create fs for nfs\n"
    },
    {
      "commit": "f5383a44be710022e88fc14df049b58b250f3773",
      "tree": "1ce10f53c8bfcd4fc24489c87b8e6770225fb88b",
      "parents": [],
      "author": {
        "name": "Filip Pytloun",
        "email": "filip@pytloun.cz",
        "time": "Tue Oct 06 16:28:32 2015 +0200"
      },
      "committer": {
        "name": "Filip Pytloun",
        "email": "filip@pytloun.cz",
        "time": "Tue Oct 06 16:40:56 2015 +0200"
      },
      "message": "Initial commit\n"
    }
  ]
}