* update links to new Ansible Galaxy
Signed-off-by: Martin Schurz <[email protected]>
* remove dead link
Signed-off-by: Martin Schurz <[email protected]>
---------
Signed-off-by: Martin Schurz <[email protected]>
* add role argument spec for os, ssh, mysql
Signed-off-by: Sebastian Gumprich <[email protected]>
* add role argument spec for os, ssh, mysql
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove variable in variable as it cannot be used in argument spec
Signed-off-by: Sebastian Gumprich <[email protected]>
* fix wrong syntax
* fix spelling errors
Signed-off-by: Sebastian Gumprich <[email protected]>
* cannot use vars before arg-spec validation
Signed-off-by: Sebastian Gumprich <[email protected]>
* yamllint the arg-spec
Signed-off-by: Sebastian Gumprich <[email protected]>
* add back variable
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove redundant setting in tests
* fix descriptions in mysql hardening to betterreflect what they do
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove duplicate empty line
Signed-off-by: Sebastian Gumprich <[email protected]>
* set correct defaults on to ssl options
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove left-over hidepid argument spec
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove license and author infos, this lives in the collection readme
Signed-off-by: Sebastian Gumprich <[email protected]>
* fix styling
Signed-off-by: Sebastian Gumprich <[email protected]>
* update some descriptions and sort them in the readme
Signed-off-by: Sebastian Gumprich <[email protected]>
* some more linting
Signed-off-by: Sebastian Gumprich <[email protected]>
---------
Signed-off-by: Sebastian Gumprich <[email protected]>
Co-authored-by: Sebastian Gumprich <[email protected]>
* add debian 12 support
Signed-off-by: Sebastian Gumprich <[email protected]>
* temp disable pam-checks
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove debian12 from vagrant tests as there's no box yet
Signed-off-by: Sebastian Gumprich <[email protected]>
* use new pam-tester from pip
Signed-off-by: Sebastian Gumprich <[email protected]>
* use new pam-tester from pip
Signed-off-by: Sebastian Gumprich <[email protected]>
* add setuptoolks to pam-tester install
Signed-off-by: Sebastian Gumprich <[email protected]>
* add setuptoolks to pam-tester install
Signed-off-by: Sebastian Gumprich <[email protected]>
* add setuptoolks to pam-tester install
Signed-off-by: Sebastian Gumprich <[email protected]>
* add setuptoolks to pam-tester install
Signed-off-by: Sebastian Gumprich <[email protected]>
* install pam-tester with python3 and use full path to it
Signed-off-by: Sebastian Gumprich <[email protected]>
* install python3-setupttools in verify-tests
Signed-off-by: Sebastian Gumprich <[email protected]>
* fix path for pam-tester in all tests
Signed-off-by: Sebastian Gumprich <[email protected]>
* set python interpreter to 3 for verify-tests
Signed-off-by: Sebastian Gumprich <[email protected]>
* Revert "set python interpreter to 3 for verify-tests"
This reverts commit 00b6556e33.
* add back accidentally deleted tasks
Signed-off-by: Sebastian Gumprich <[email protected]>
---------
Signed-off-by: Sebastian Gumprich <[email protected]>
Co-authored-by: Sebastian Gumprich <[email protected]>
* make template overrideable
by referencing the auditd.conf.j2 template, a custom template can be provided to the role.
Signed-off-by: Dennis Lerch <[email protected]>
* extend auditd config
make freq and log_file configurable
implement write_logs with it's default value in order to be able to disable log writing
Signed-off-by: Dennis Lerch <[email protected]>
* Extend README.md documentation by new variables
reorder `os_auditd_log_format` to keep sequence from defaults
Signed-off-by: Dennis Lerch <[email protected]>
---------
Signed-off-by: Dennis Lerch <[email protected]>
there's probably some added value for this, but I see no reason to change so many variables and possibly break something when it still works and nobody complained
Signed-off-by: Sebastian Gumprich <[email protected]>
