Added comment on top of template about which role modified the resulting file. https://github.com/dev-sec/ansible-collection-hardening/issues/345

Signed-off-by: Farid Joubbi <[email protected]>

roles/nginx_hardening/templates/hardening.conf.j2

@@ -1,4 +1,5 @@
 # {{ ansible_managed|comment }}
+# Generated by Ansible {{ ansible_role_name }}
 # Additional configuration for Nginx.
 
 client_header_buffer_size   {{ nginx_client_header_buffer_size }};

roles/os_hardening/templates/etc/audit/auditd.conf.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 log_file = /var/log/audit/audit.log
 log_format = RAW

roles/os_hardening/templates/etc/default/ufw.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 # /etc/default/ufw
 #

roles/os_hardening/templates/etc/initramfs-tools/modules.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 # This file contains the names of kernel modules that should be loaded at boot time, one per line. Lines beginning with "#" are ignored.
 #

roles/os_hardening/templates/etc/libuser.conf.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 # See libuser.conf(5) for more information. 
 

roles/os_hardening/templates/etc/login.defs.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 # Configuration control definitions for the login package.
 #

roles/os_hardening/templates/etc/modprobe.d/modprobe.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 {% for fs in os_unused_filesystems | difference(os_filesystem_whitelist) %}
 install {{fs}} /bin/true

roles/os_hardening/templates/etc/pam.d/rhel_system_auth.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 #%PAM-1.0
 {% if os_auth_retries > 0 %}

roles/os_hardening/templates/etc/profile.d/profile.conf.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 # Disable core dumps via soft limits for all users. Compliance to this setting is voluntary and can be modified by users up to a hard limit. This setting is a sane default.
 ulimit -S -c 0 > /dev/null 2>&1

roles/os_hardening/templates/etc/securetty.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 # A list of TTYs, from which root can log in
 # see `man securetty` for reference

roles/os_hardening/templates/etc/sysconfig/rhel_sysconfig_init.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 # color => new RH6.0 bootup
 # verbose => old-style bootup

roles/os_hardening/templates/usr/share/pam-configs/pam_passwdqd.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 Name: passwdqc password strength enforcement
 Default: yes

roles/os_hardening/templates/usr/share/pam-configs/pam_tally2.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 Name: tally2 lockout after failed attempts enforcement
 Default: yes

roles/ssh_hardening/templates/authorized_principals.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 {% for principal in item.principals %}
 {{ principal }}

roles/ssh_hardening/templates/openssh.conf.j2

@@ -1,5 +1,6 @@
 #jinja2: trim_blocks: "true", lstrip_blocks: "true"
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 # This is the ssh client system-wide configuration file.
 # See ssh_config(5) for more information on any settings used.

roles/ssh_hardening/templates/opensshd.conf.j2

@@ -1,5 +1,6 @@
 #jinja2: trim_blocks: "true", lstrip_blocks: "true"
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 # This is the sshd server system-wide configuration file.
 # See sshd_config(5) for more information.

roles/ssh_hardening/templates/revoked_keys.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 {% for key in ssh_server_revoked_keys %}
 {{ key }}

roles/ssh_hardening/templates/trusted_user_ca_keys.j2

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}
 
 {% for key in ssh_trusted_user_ca_keys %}
 {{ key }}