diff --git a/Dockerfile b/Dockerfile index 9dfbdd29e36d119251283173de0544d9e800d6c6..3ff60266a61e13c9be3d68e77ba410431c9440f0 100644 --- a/Dockerfile +++ b/Dockerfile @@ -80,7 +80,7 @@ RUN mv /minimal/splunk/etc /minimal/splunk-etc RUN mv /extras/splunk/etc /extras/splunk-etc RUN mkdir -p /minimal/splunk/etc /minimal/splunk/share/splunk/search_mrsparkle/modules.new COPY splunk-ansible.tar.gz splunk-ansible.tar.gz -RUN tar -zxf splunk-ansible.tar.gz && mv splunk-ansible-8.2.1 splunk-ansible-develop && rm splunk-ansible.tar.gz +RUN tar -zxf splunk-ansible.tar.gz && mv splunk-ansible-8.2.2 splunk-ansible-develop && rm splunk-ansible.tar.gz # # Minimal Splunk base image with many files excluded, intended for internal and experimental use @@ -185,6 +185,7 @@ RUN ubi8-development/scripts/xccdf_org.ssgproject.content_rule_disable_ctrlaltde ubi8-development/scripts/xccdf_org.ssgproject.content_rule_accounts_password_minlen_login_defs.sh && \ ubi8-development/scripts/xccdf_org.ssgproject.content_rule_account_disable_post_pw_expiration.sh RUN rm -fdr ubi8-development +RUN grep -rl -e "-BEGIN.*PRIVATE KEY-" /opt/splunk | while read line; do rm -f "$line";done; USER ${SPLUNK_USER} HEALTHCHECK --interval=30s --timeout=30s --start-period=3m --retries=5 CMD /sbin/checkstate.sh || exit 1 diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml index f0c14d9f27e3e023a6f25c4f3f4df4fb2bf3e2f4..f0abca03415278c7a1d6bdbb71d997929abc5cd2 100644 --- a/hardening_manifest.yaml +++ b/hardening_manifest.yaml @@ -23,11 +23,11 @@ labels: mil.dso.ironbank.product.name: "Splunk Enterprise" resources: -- url: https://github.com/splunk/splunk-ansible/archive/8.2.1.tar.gz +- url: https://github.com/splunk/splunk-ansible/archive/8.2.2.tar.gz filename: splunk-ansible.tar.gz validation: type: sha256 - value: 2b749382aab23a2590792245d9e8b79c4ab285049b90b06efded254de419a264 + value: f5a836c40d26e10b87e1b22143bb73b3b05337a18804a166482c39f7070fd8ff - url: https://d7wz6hmoaavd0.cloudfront.net/products/splunk/releases/8.2.2/linux/splunk-8.2.2-87344edfcdb4-Linux-x86_64.tgz filename: splunk-8.2.2-87344edfcdb4-Linux-x86_64.tgz validation: