# CIS Bencjmarks - Rhel 7

**URL:** <https://forum.ansible.com/t/cis-bencjmarks-rhel-7/33784>\
**Category:** Ansible Project\
**Tags:** rhel\
**Created:** [September 10, 2020, 8:26am UTC](https://forum.ansible.com/t/cis-bencjmarks-rhel-7/33784 "2020-09-10T08:26:09Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Josephsimon\_Arokiara](https://avatars.discourse-cdn.com/v4/letter/j/f05b48/32.png) [@Josephsimon\_Arokiara](https://forum.ansible.com/u/Josephsimon_Arokiara)\
**Post date:** [September 10, 2020, 8:26am UTC](https://forum.ansible.com/t/cis-bencjmarks-rhel-7/33784/1 "2020-09-10T08:26:09Z")

</div>

Hi All,

How you doing?

Do we have any playbooks/roles for doing audit and remediation on CIS benchmarks for Rhel 7?

Cheers,  
Joseph

---

<div class="post-metadata">

**Author:** ![Akasurde](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/akasurde/32/230_2.png) [@Akasurde](https://forum.ansible.com/u/Akasurde)\
**Post date:** [September 10, 2020, 8:35am UTC](https://forum.ansible.com/t/cis-bencjmarks-rhel-7/33784/2 "2020-09-10T08:35:19Z")

</div>

I have not tried this but you can check - [https://github.com/ansible/ansible-lockdown](https://github.com/ansible/ansible-lockdown)

---

<div class="post-metadata">

**Author:** ![Kiran\_Kumar](https://avatars.discourse-cdn.com/v4/letter/k/f475e1/32.png) [@Kiran\_Kumar](https://forum.ansible.com/u/Kiran_Kumar)\
**Post date:** [September 10, 2020, 9:30am UTC](https://forum.ansible.com/t/cis-bencjmarks-rhel-7/33784/3 "2020-09-10T09:30:36Z")

</div>

I would suggest - [https://galaxy.ansible.com/MindPointGroup/RHEL7-CIS/](https://galaxy.ansible.com/MindPointGroup/RHEL7-CIS/)

---

<div class="post-metadata">

**Author:** ![PhilEv](https://avatars.discourse-cdn.com/v4/letter/p/ee59a6/32.png) [@PhilEv](https://forum.ansible.com/u/PhilEv)\
**Post date:** [September 10, 2020, 10:16am UTC](https://forum.ansible.com/t/cis-bencjmarks-rhel-7/33784/4 "2020-09-10T10:16:57Z")

</div>

[https://github.com/openstack/ansible-hardening](https://github.com/openstack/ansible-hardening)

---

<div class="post-metadata">

**Author:** ![Josephsimon\_Arokiara](https://avatars.discourse-cdn.com/v4/letter/j/f05b48/32.png) [@Josephsimon\_Arokiara](https://forum.ansible.com/u/Josephsimon_Arokiara)\
**Post date:** [September 10, 2020, 1:27pm UTC](https://forum.ansible.com/t/cis-bencjmarks-rhel-7/33784/5 "2020-09-10T13:27:21Z")

</div>

Thanks a lot Kiran/Abhijeet and Philippe for your updates. I will look into it.

Cheers,  
Joseph

---

<div class="post-metadata">

**Author:** ![cassell](https://avatars.discourse-cdn.com/v4/letter/c/ecae2f/32.png) [@cassell](https://forum.ansible.com/u/cassell)\
**Post date:** [September 10, 2020, 1:33pm UTC](https://forum.ansible.com/t/cis-bencjmarks-rhel-7/33784/6 "2020-09-10T13:33:59Z")

</div>

The galaxy releases are lagging behind, but this probably is what you want: [https://github.com/ansible-lockdown/RHEL7-CIS](https://github.com/ansible-lockdown/RHEL7-CIS)

V/r,  
James Cassell

---

<div class="post-metadata">

**Author:** ![Josephsimon\_Arokiara](https://avatars.discourse-cdn.com/v4/letter/j/f05b48/32.png) [@Josephsimon\_Arokiara](https://forum.ansible.com/u/Josephsimon_Arokiara)\
**Post date:** [September 10, 2020, 1:36pm UTC](https://forum.ansible.com/t/cis-bencjmarks-rhel-7/33784/7 "2020-09-10T13:36:19Z")

</div>

Hi James,

I have seen this role. This is based on the CIS baseline 2.2.0. I will try to use this …

Cheers,  
Joseph

---

<div class="post-metadata">

**Author:** ![Prasad\_Shetty](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/prasad_shetty/32/4913_2.png) [@Prasad\_Shetty](https://forum.ansible.com/u/Prasad_Shetty)\
**Post date:** [September 10, 2020, 5:14pm UTC](https://forum.ansible.com/t/cis-bencjmarks-rhel-7/33784/8 "2020-09-10T17:14:19Z")

</div>

There are many just have a glance on ansible glaxy