We started progress on it but never had a chance to finish them all. You can do 99% of it through

augeas

,

file

,

shadow

, etc. E.G. -

compliance_CCE-27632-9": {
      "query": "SELECT * FROM file WHERE (path = '/usr/sbin/apachectl') AND mode != '0755';",
      "interval": 43200,
      "removed": false,
      "blacklist": false,
      "platform": "linux",
      "description": "The permissions for the Apache /usr/sbin/apachectl file should be set correctly.",
      "value": "CIS Apache Benchmark for Unix For Apache Versions 1.3 and 2.0 Levels I and II"
    }