[RFC cip-dev][isar-cip-core][PATCH 04/14] Add github.com/ovh/debian-cis for the hardening validation

Quirin Gylstorff <[email protected]> Fri, 24 Jul 2026 14:39:06 +0200
Newsgroups org.cip-project.lists.cip-dev
Message-ID <[email protected]>
From: Quirin Gylstorff <[email protected]>

This creates a Debian package out of https://github.com/ovh/debian-cis/
to validate the hardening level during runtime.

Co-Authored-by: Felix Moessbauer <[email protected]>
Signed-off-by: Quirin Gylstorff <[email protected]>
---
 recipes-security/cis-hardening/cis-hardening_4.1-6.bb | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 recipes-security/cis-hardening/cis-hardening_4.1-6.bb

diff --git a/recipes-security/cis-hardening/cis-hardening_4.1-6.bb b/recipes-security/cis-hardening/cis-hardening_4.1-6.bb
new file mode 100644
index 0000000..bed2dae
--- /dev/null
+++ b/recipes-security/cis-hardening/cis-hardening_4.1-6.bb
@@ -0,0 +1,6 @@
+inherit dpkg
+
+DPKG_ARCH = "all"
+
+SRC_URI = "git://github.com/ovh/debian-cis.git;protocol=https;destsuffix=${P};nobranch=1"
+SRCREV = "efbd5b35ba32226e8950d52bd3f3444c702bbd84"
-- 
2.53.0