add posibility to run ssh_hardening as unprivileged user (#561)

* add VM tests for ssh_hardening

Signed-off-by: Martin Schurz <[email protected]>

* remove VM tests from ssh_hardening

Signed-off-by: Martin Schurz <[email protected]>

* run ssh_hardening test as unprivileged user

Signed-off-by: Martin Schurz <[email protected]>

* add link for documentation

Signed-off-by: Martin Schurz <[email protected]>

* use different config

Signed-off-by: Martin Schurz <[email protected]>

* remove become

Signed-off-by: Martin Schurz <[email protected]>

* re-add become

Signed-off-by: Martin Schurz <[email protected]>

* move become into role

Signed-off-by: Martin Schurz <[email protected]>

* indentation

Signed-off-by: Martin Schurz <[email protected]>

* try args apply

Signed-off-by: Martin Schurz <[email protected]>

* fix linting

Signed-off-by: Martin Schurz <[email protected]>

* add documentation

Signed-off-by: Martin Schurz <[email protected]>

Signed-off-by: Martin Schurz <[email protected]>
This commit is contained in:
schurzi authored and GitHub committed 2022-08-15 13:19:07 +02:00
1 parent fad6059f6d
commit a806ec8598
5 files changed
+13 -1

No files matched your search

+3
View File
@@ -1,3 +1,6 @@
---
- include_tasks: hardening.yml
args:
apply:
become: true
when: ssh_hardening_enabled | bool