RHEL8 CIS Benchmark Remediation
Budget: $12 – $75 SGD
I need a clean, well-commented Bash script that fully remediates every control in the CIS Benchmark for Red Hat Enterprise Linux 8. Nothing else is in place today, so you will be starting from scratch and structuring the logic exactly the way you prefer, as long as the final result brings a fresh RHEL 8 install from 0 % to 100 % compliance.
Because this must cover all recommendations, please make sure each CIS section (services, permissions, auditing, kernel parameters, etc.) is addressed. Where a setting might vary by environment, build the script so default values come from a clearly marked variables block near the top; that will let me adjust before deployment. Idempotency is important: if I run the script twice, the second pass should report that everything is already compliant without breaking anything.
Deliverables I expect:
• A single Bash file with inline comments explaining what each function does
• A companion README outlining any prerequisites and how to execute / rollback
• A plain-text compliance report generated after remediation (CIS-CAT or OpenSCAP acceptable)
Acceptance criteria: running the script on a fresh RHEL 8 virtual machine must raise the CIS-CAT score to 100 % with no manual tweaks, and a second run must finish cleanly with no errors. If that sounds straightforward, let me know your timeline and any clarifying questions so we can get started quickly.
Because this must cover all recommendations, please make sure each CIS section (services, permissions, auditing, kernel parameters, etc.) is addressed. Where a setting might vary by environment, build the script so default values come from a clearly marked variables block near the top; that will let me adjust before deployment. Idempotency is important: if I run the script twice, the second pass should report that everything is already compliant without breaking anything.
Deliverables I expect:
• A single Bash file with inline comments explaining what each function does
• A companion README outlining any prerequisites and how to execute / rollback
• A plain-text compliance report generated after remediation (CIS-CAT or OpenSCAP acceptable)
Acceptance criteria: running the script on a fresh RHEL 8 virtual machine must raise the CIS-CAT score to 100 % with no manual tweaks, and a second run must finish cleanly with no errors. If that sounds straightforward, let me know your timeline and any clarifying questions so we can get started quickly.