qpc-github / ansible-os-ubuntu20

Ansible role that configures security control to meet GSA Benchmark Requirements

Ubuntu 20.04 GSA Benchmark

Configure Ubuntu 20.04 machine to be GSA compliant. Level 1 and 2 findings will be corrected by default. It's based on GSA Ubuntu 20.04 Benchmark.

Role Variables

There are many role variables defined in defaults/main.yml.

Hardening will be applied to the following configurations by default:

• General Configurations (Section 1)
• Services Configurations (Section 2)
• Network Configurations (Section 3)
• Logging and Auditing Configurations (Section 4)
• Access, Authentication and Authorization Configurations (Section 5)
• System Maintenance Configurations (Section 6)

Above high level configurations and other fine-grained configurations can be enabled/disabled using variabled defined in in defaults/main.yml.

The configuration will not:

• Install and configure AIDE
• Install and configure NTP
• Configure the /etc/group wheel configurations

Other settings and services are listed. Please review to ensure they meet your organizational requirements.

Dependencies

Ansible >= 2.7

Example Playbook

---
- name: Harden Server
  hosts: all
  become: yes

  roles:
    - ansible-os-ubuntu20

How to test locally

ansible-playbook playbook.yml --connection=local