dev-sec CI
e6ea4f0b4c
update mysql_hardening readme
2024-10-13 18:15:40 +00:00
dev-sec CI
94f05a971a
update changelog
2024-10-13 18:14:26 +00:00
Sebastian Gumprich
aa737011e4
fix(cicd): test idempotence on ssh custom tests ( #807 )
...
Signed-off-by: Sebastian Gumprich <[email protected]
2024-10-13 20:12:21 +02:00
dev-sec CI
19ac284200
update nginx_hardening readme
2024-10-13 18:12:08 +00:00
Sebastian Gumprich
141efbc516
fix(ssh_hardening): test setting kex to false, remove wrong default ( #808 )
...
Signed-off-by: Sebastian Gumprich <[email protected]
2024-10-13 20:11:47 +02:00
dev-sec CI
7cca65bc90
update changelog
2024-10-13 10:37:24 +00:00
rndmh3ro
cfd4536868
Prettified Code!
2024-10-13 10:35:08 +00:00
seven-beep
a97a54dc30
Provide granular noop for ssh configuration ( #789 )
...
* Provide granular noop for shh configuration
We would like to have more fine grained options on applying or not specific configurations.
This commit let the user choose to noop some configuration with a few new
boolean variables.
Motivation for theses options are we may configure ourselves some (ssh host key
regeneration in a templating system) or we are not ready for others (ssh_kex
will break dist-upgrades, letting the operator without ssh).
Signed-off-by: seven beep <[email protected] [email protected] [email protected]
2024-10-13 12:34:52 +02:00
dev-sec CI
a1c7e77f08
update changelog
2024-10-10 11:41:18 +00:00
dev-sec CI
be5a98bce5
update mysql_hardening readme
2024-10-10 11:39:07 +00:00
dev-sec CI
1464ee7693
update nginx_hardening readme
2024-10-10 11:39:01 +00:00
dev-sec CI
ba1991b4c1
update os_hardening readme
2024-10-10 11:39:00 +00:00
dev-sec CI
a234d23d77
update ssh_hardening readme
2024-10-10 11:38:59 +00:00
schurzi
3923ea888b
Merge pull request #806 from vmpr/patch-2
...
Document correct quotes for ssh_permit_tunnel parameter
2024-10-10 13:38:39 +02:00
vmpr
27aa081889
fixing missing quotes for ssh_permit_tunnel parameter in argument_specs.yml
...
ssh_permit_tunnel needs quotes otherwise we will end up with an error:
```
TASK [devsec.hardening.ssh_hardening : Create sshd_config and set permissions to root/600] **********************************************************************************************************************
fatal: [vampdock02]: FAILED! => {"changed": false, "checksum": "fe6b74e30b1a653f83c2cbe1dd1332c14bd55833", "exit_status": 255, "msg": "failed to validate", "stderr": "/home/debian/.ansible/tmp/ansible-tmp-1728530891.493071-72386-149151737175948/source line 123: bad PermitTunnel argument True\r\n", "stderr_lines": ["/home/debian/.ansible/tmp/ansible-tmp-1728530891.493071-72386-149151737175948/source line 123: bad PermitTunnel argument True"], "stdout": "", "stdout_lines": []}
```
2024-10-10 15:50:17 +08:00
dev-sec CI
ee727ed9b2
update changelog
2024-10-09 12:42:51 +00:00
rndmh3ro
d6d2624e4d
Prettified Code!
2024-10-09 12:40:26 +00:00
Sebastian Gumprich
62947a6ea2
fix(docs): add 'become: true' to example playbooks. fix #787 ( #804 )
...
Signed-off-by: Sebastian Gumprich <[email protected]
2024-10-09 14:40:08 +02:00
dev-sec CI
6ff5cebeb3
update changelog
2024-10-08 22:03:42 +00:00
schurzi
421d502f90
Merge pull request #802 from dev-sec/renovate/ansible-core-2.x
...
chore(deps): update dependency ansible-core to v2.17.5
2024-10-09 00:01:03 +02:00
renovate[bot]
d51f784244
chore(deps): update dependency ansible-core to v2.17.5
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-08 13:22:40 +00:00
dev-sec CI
fdcfd05a4c
update changelog
2024-10-08 11:28:54 +00:00
schurzi
f5303344e4
Merge pull request #800 from dev-sec/renovate/actions-checkout-digest
...
chore(deps): update actions/checkout digest to eef6144
2024-10-08 13:27:16 +02:00
schurzi
9476dc9130
Merge pull request #795 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to 3b5bee1
2024-10-08 13:26:49 +02:00
dev-sec CI
f445c29f26
update changelog
2024-10-08 07:32:10 +00:00
schurzi
2f93835a6f
Merge pull request #801 from dev-sec/guard_molecule
...
Don't run tests if the environment is not correct
2024-10-08 09:29:29 +02:00
dev-sec CI
f380343a9d
update changelog
2024-10-08 06:32:35 +00:00
T.O.
9c069ff8e8
feat: ✨ Corrected package name ( #799 )
...
`policycoreutils-python` does not exist and was corrected to
`policycoreutils-python-utils`. Only tested with debian
2024-10-08 08:29:52 +02:00
Martin Schurz
6cc57e1581
Don't run tests if the environment is not correct
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-07 23:02:51 +02:00
renovate[bot]
5a28783a53
chore(deps): update actions/checkout digest to eef6144
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-07 19:31:13 +00:00
dev-sec CI
f3e012222a
update changelog
2024-10-05 08:06:47 +00:00
Martin Schurz
3bdae0d98f
Fix Changelog generation by adapting regex
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-05 10:04:07 +02:00
dev-sec CI
7faafb34de
update changelog
2024-10-05 07:50:29 +00:00
schurzi
437546f4a9
Prettified Code!
2024-10-05 07:48:38 +00:00
Martin Schurz
1748396683
Fix Changelog
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-05 09:48:20 +02:00
dev-sec CI
c185fa314f
update changelog
2024-10-04 13:24:51 +00:00
dev-sec CI
5ef0c42d64
update os_hardening readme
2024-10-04 13:22:42 +00:00
schurzi
3daba1f3ee
Merge pull request #797 from dev-sec/remdep
...
Remove unused files and variables
2024-10-04 15:22:15 +02:00
dev-sec CI
ba5d025c82
update changelog
2024-10-04 11:31:17 +00:00
Martin Schurz
2b495bf6b9
Disable testing of audit in docker
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-04 13:29:17 +02:00
Martin Schurz
4c87d293ce
Disable testing of audit in docker
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-04 13:29:17 +02:00
Martin Schurz
2e3d5e916b
Remove unused files and variables
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-04 13:29:16 +02:00
schurzi
077900eadd
Merge pull request #798 from dev-sec/vmvenv
...
Use Python venv for VM tests
2024-10-04 13:28:41 +02:00
Martin Schurz
c705e50e0c
Correct typo
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-04 12:23:18 +02:00
Martin Schurz
75158eb6d3
add Dependency
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-04 11:11:40 +02:00
Martin Schurz
ecee5ffcbd
Use Python venv for VM tests
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-04 11:07:42 +02:00
Martin Schurz
75f6b1a801
Use Python venv for VM tests
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-04 11:05:04 +02:00
renovate[bot]
6824eda2ba
chore(deps): update ansible/ansible-lint digest to 3b5bee1
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-19 18:20:52 +00:00
dev-sec CI
d386d0fe1b
update changelog
2024-09-15 19:44:24 +00:00
renovate[bot]
e72f60e8e1
chore(deps): update dependency ansible-core to v2.17.4
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-15 19:42:18 +00:00
dev-sec CI