Repository navigation

Stage 1b: arm64, more test VMs, Lynis 85, remaining guard checks - #19

Draft

VectoDE wants to merge 17 commits into

feat/lss-2-corefrom

feat/lss-1b

Draft

Stage 1b: arm64, more test VMs, Lynis 85, remaining guard checks#19
VectoDE wants to merge 17 commits into
feat/lss-2-corefrom
feat/lss-1b

Commits on Oct 13, 2026
- Run the integration tests on arm64 and the profile on Ubuntu 26.04
  
  VectoDE
  and
  claude
  committed
  ee50904
- guard: report vulnerable packages, failed logins and what the scanners found
  
  VectoDE
  and
  claude
  committed
  cd988ad
- guard: trust only journald fields for logins and clean quoted text
  
  VectoDE
  and
  claude
  committed
  9ca6c47
- Run the kernel modules and the profile in KVM VMs with Debian and the RHEL family
  
  VectoDE
  and
  claude
  committed
  9a5b4c4
- Harden further towards a Lynis index of 85
  
  VectoDE
  and
  claude
  committed
  b7cfff3
- Fix the guard unit tests, two ShellCheck notes and the 26.04 runner label
  
  VectoDE
  and
  claude
  committed
  e93b22c
- Support sudo-rs and the RHEL sudo path in admin-user
  
  VectoDE
  and
  claude
  committed
  71fc155
- Restrict cron and sshd_config permissions, raise the Lynis minimums
  
  VectoDE
  and
  claude
  committed
  adfe679
- Confine the scanner units with systemd
  
  VectoDE
  and
  claude
  committed
  8cfcb4f
- usbguard: work on systems without a USB bus; give the test VMs one
  
  VectoDE
  and
  claude
  committed
  c9fc6cc
- Quiet the workflow steps that printed Not and No lines
  
  VectoDE
  and
  claude
  committed
  11d4e5e
- Fix swap on Rocky 9 and the firewall on AlmaLinux 10
  
  VectoDE
  and
  claude
  committed
  a7bac7d
- Read the firewalld zone target from the permanent configuration
  
  VectoDE
  and
  claude
  committed
  4f5f11f
- Install augenrules on RHEL 10 and show what a second install changed
  
  VectoDE
  and
  claude
  committed
  37f8a8f
- fix(security): stable unit paths on RHEL, quiet augenrules and firewalld start
  
  VectoDE
  and
  claude
  committed
  ef4d971
- fix(service): let scanners enter their SELinux domain
  
  VectoDE
  and
  claude
  committed
  d15f9a6
- ci(integration): Lynis minimum 80 for the RHEL family
  
  VectoDE
  and
  claude
  committed
  a514d25

Commits

Commits on Oct 13, 2026