andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,412 Commits 14 Branches 64 Tags
0600cdae75a0a6c9a223dfb45ab41a97e05444cb
Commit Graph
1412 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
schurzi e266decde8 use ansible dhparam module (#32) 
* use ansible dhparam module
 2020-08-28 12:35:52 +02:00
schurzi 57f7a15b51 imove chmod to end because of generated files (#31) 
Signed-off-by: Martin Schurz <[email protected]>
 2020-08-24 11:22:33 +02:00
dev-sec CI 29a43568e6 update changelog 2020-08-24 08:46:44 +00:00
schurzi 3028b5ddc7 fix linting issues (#30) 
* fix linting issues

Signed-off-by: Martin Schurz <[email protected]>

* set file permissions

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-24 10:45:13 +02:00
dev-sec CI 25623b0d0b update changelog 2020-08-23 16:43:49 +00:00
schurzi c69e7efb11 Merge pull request #49 from dev-sec/collection 
Fix linting errors and simplivy vars-handling
 2020-08-23 18:42:09 +02:00
Sebastian Gumprich 3b059d4c7c simplify vars-handling 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-23 13:56:44 +02:00
Sebastian Gumprich 0757a3d1c3 fix linting errors 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-23 13:21:46 +02:00
dev-sec CI 30d5641e9b update changelog 2020-08-22 16:18:01 +00:00
schurzi a82e1a7a9f fix litner errors (#322) 
* fix litner errors

Signed-off-by: Martin Schurz <[email protected]>

* make linter more happy

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-22 18:14:54 +02:00
dev-sec CI 6b465f9cbb update changelog 2020-08-22 13:23:59 +00:00
schurzi b37c2ddb69 Merge pull request #303 from dev-sec/arch_support 
Arch support
 2020-08-22 15:21:18 +02:00
Sebastian Gumprich de5a7ce506 add archlinux support 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-22 14:08:08 +02:00
Andre Lehmann 77434b8a37 Make compatible with ArchLinux 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-08-22 13:39:44 +02:00
dev-sec CI a806a25af5 update changelog 2020-08-22 06:56:30 +00:00
schurzi 4ddbbb2a61 fix linting for molecule (#301) 
Signed-off-by: Martin Schurz <[email protected]>
 2020-08-22 08:53:44 +02:00
dev-sec CI 17570fda66 update changelog 2020-08-18 22:08:28 +00:00
schurzi 989f7b0e1e Merge pull request #300 from danielkubat/master 
define file permissions explicitly
 2020-08-19 00:05:51 +02:00
danielkubat fd10d8e8d2 single quotes added to follow role formatting 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 23:50:46 +02:00
danielkubat 34abe1ab03 mode defined in octal form 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 22:50:10 +02:00
danielkubat 2a75fc11d3 permissions explicitly defined 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 22:38:08 +02:00
dev-sec CI 6f0181b2fc update changelog 2020-08-17 10:17:48 +00:00
Daniel Kubat 7077187a67 replace module parameter fixed (#297) 
Signed-off-by: danielkubat <[email protected]>
6.2.0 		2020-08-17 12:15:04 +02:00
dev-sec CI e698433939 update changelog 2020-08-16 18:19:59 +00:00
dev-sec CI 37ab009093 update changelog 2020-08-16 18:19:43 +00:00
schurzi 56f6cd0337 Merge pull request #296 from dev-sec/fedora 
fix fedora build
 2020-08-16 20:17:15 +02:00
schurzi aaece07fe0 Merge pull request #321 from dev-sec/fedora 
use systemd in fedora
 2020-08-16 20:16:53 +02:00
dev-sec CI 337c7dbbed update changelog 2020-08-16 08:06:54 +00:00
Daniel KubatandSebastian Gumprich 2c4505addd use find module instead of shell (#294) 
* use find module to find yum repos, regexp fixes

Signed-off-by: danielkubat <[email protected]>

* use loop instead of with_*

Signed-off-by: danielkubat <[email protected]>

* Update tasks/yum.yml

Co-authored-by: Sebastian Gumprich <[email protected]>
 2020-08-16 10:04:26 +02:00
Sebastian Gumprich 88fecc4f2e try to fix fedora build 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-16 09:53:11 +02:00
Sebastian Gumprich 0b38b85a0a install systemd in fedora 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-16 09:52:59 +02:00
dev-sec CI c777133050 update changelog 2020-08-13 09:48:20 +00:00
Alex Domoradov 29158e4285 Optimize and unify when clause (#295) 
Signed-off-by: Alex Domoradov <[email protected]>
 2020-08-13 11:45:44 +02:00
dev-sec CI 5cad140f7b update changelog 2020-08-09 15:04:56 +00:00
Sebastian Gumprich fa2cf790f8 Merge pull request #320 from dev-sec/pam 
add separate option for controlling motd via pam
 2020-08-09 17:02:02 +02:00
Martin Schurz 5cf53b215f add separate option for controlling motd via pam 
makes it possible to set different values for motd via sshd and pam.
Also create a backup file of pam configuration, to allow user to restore
the previous settings.

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-08 18:14:38 +02:00
dev-sec CI bbe5ad4707 update changelog 2020-08-07 18:06:25 +00:00
schurzi b3d7acee44 Merge pull request #48 from dev-sec/kitchen_travis 
update testing
 2020-08-07 20:04:50 +02:00
Sebastian Gumprich 6b42f12434 update testing 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-07 19:30:58 +02:00
dev-sec CI eb777fbe2f update changelog 2020-08-07 07:02:27 +00:00
schurzi eaeca04d96 do not blacklist used filesystems (#289) 
* add additional check for efi

some systems seem to require vfat because of efi, despite not exposing a
/sys/firmware/efi directory.

Signed-off-by: Martin Schurz <[email protected]>

* make linter happy

Signed-off-by: Martin Schurz <[email protected]>

* rework check to check for all used filesystems

so we don't break existing mounts with our configuration

Signed-off-by: Martin Schurz <[email protected]>

* do not check this on el6

Signed-off-by: Martin Schurz <[email protected]>

* add comment to clarify

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-07 08:59:46 +02:00
dev-sec CI 83a6d88c46 update changelog 2020-08-03 19:31:28 +00:00
Sebastian Gumprich 04d19fd195 fix typo 2020-08-03 21:28:23 +02:00
dev-sec CI fe7e37e6e9 update changelog 2020-08-03 13:58:20 +00:00
schurzi 387fc472bd improve testing (#287) 
* fix problem with package_facts on SuSE

SuSE Linux does not work with ansibel module packet_facts, so we need to
exclude this task there.

Signed-off-by: Martin Schurz <[email protected]>

* fix local docker tests for all distributions

Signed-off-by: Martin Schurz <[email protected]>

* fix local vagrant tests for all distributions

Signed-off-by: Martin Schurz <[email protected]>

* simplify travis tests

Signed-off-by: Martin Schurz <[email protected]>

* fix opensuse in travis

Signed-off-by: Martin Schurz <[email protected]>

* add fixes for suse

Signed-off-by: Martin Schurz <[email protected]>

* add special case for suse docker

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-03 15:55:27 +02:00
dev-sec CI 20bf4eaa99 update changelog 2020-07-28 08:29:59 +00:00
Sebastian Gumprich f1a65f5f44 Merge pull request #318 from dev-sec/fix_kitchen 
fix local kitchen tests
 2020-07-28 09:24:22 +02:00
Martin Schurz 04f731a08c fix local kitchen tests 
somehow a "real" linux needs different options than WSL. This is now
also working on debian 10

Signed-off-by: Martin Schurz <[email protected]>
 2020-07-28 09:12:43 +02:00
schurzi 9b14f64f67 Merge pull request #317 from aqw/umask 
fix sftp_umask; store as literal not octal
 2020-07-28 08:59:12 +02:00
dev-sec CI b7791833a7 update changelog 2020-07-28 06:33:18 +00:00