CIS Benchmark Compliance

[charlesnw]

This is the out of the box results on a fully patched/updated Cloudron per Wazuh (as of about 90 seconds ago).

I will be deploying a test instance of Cloudron on a VM with a set of CIS/NIST ansible playbooks to get the node to 100% compliance and see if anything breaks.

[robi]

Can you post the list of failures?

[nebulon]

The full list would indeed be interesting to see. Especially what comes after disabling all those kernel modules.

[charlesnw]

I’ll see about getting the full list exported to a text file and posted.

[charlesnw]

Is there a way to upload a text file to the forum? I have a csv of the wazuh report exported.

[charlesnw]

I have uploaded it here: https://staticbits.reachableceo.com/CloudronWazuhReport-2025-30-12.csv