Commit Graph
2285 Commits
Author SHA1 Message Date
vmpr 27aa081889 fixing missing quotes for ssh_permit_tunnel parameter in argument_specs.yml
ssh_permit_tunnel needs quotes otherwise we will end up with an error:
```
TASK [devsec.hardening.ssh_hardening : Create sshd_config and set permissions to root/600] **********************************************************************************************************************
fatal: [vampdock02]: FAILED! => {"changed": false, "checksum": "fe6b74e30b1a653f83c2cbe1dd1332c14bd55833", "exit_status": 255, "msg": "failed to validate", "stderr": "/home/debian/.ansible/tmp/ansible-tmp-1728530891.493071-72386-149151737175948/source line 123: bad PermitTunnel argument True\r\n", "stderr_lines": ["/home/debian/.ansible/tmp/ansible-tmp-1728530891.493071-72386-149151737175948/source line 123: bad PermitTunnel argument True"], "stdout": "", "stdout_lines": []}
```
2024-10-10 15:50:17 +08:00
dev-sec CI ee727ed9b2 update changelog 2024-10-09 12:42:51 +00:00
rndmh3ro d6d2624e4d Prettified Code! 2024-10-09 12:40:26 +00:00
Sebastian Gumprich 62947a6ea2 fix(docs): add 'become: true' to example playbooks. fix #787 (#804)
Signed-off-by: Sebastian Gumprich <[email protected]>
2024-10-09 14:40:08 +02:00
dev-sec CI 6ff5cebeb3 update changelog 2024-10-08 22:03:42 +00:00
schurzi 421d502f90 Merge pull request #802 from dev-sec/renovate/ansible-core-2.x
chore(deps): update dependency ansible-core to v2.17.5
2024-10-09 00:01:03 +02:00
renovate[bot] d51f784244 chore(deps): update dependency ansible-core to v2.17.5
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-08 13:22:40 +00:00
dev-sec CI fdcfd05a4c update changelog 2024-10-08 11:28:54 +00:00
schurzi f5303344e4 Merge pull request #800 from dev-sec/renovate/actions-checkout-digest
chore(deps): update actions/checkout digest to eef6144
2024-10-08 13:27:16 +02:00
schurzi 9476dc9130 Merge pull request #795 from dev-sec/renovate/ansible-ansible-lint-digest
chore(deps): update ansible/ansible-lint digest to 3b5bee1
2024-10-08 13:26:49 +02:00
dev-sec CI f445c29f26 update changelog 2024-10-08 07:32:10 +00:00
schurzi 2f93835a6f Merge pull request #801 from dev-sec/guard_molecule
Don't run tests if the environment is not correct
2024-10-08 09:29:29 +02:00
dev-sec CI f380343a9d update changelog 2024-10-08 06:32:35 +00:00
T.O. 9c069ff8e8 feat: ✨ Corrected package name (#799)
`policycoreutils-python` does not exist and was corrected to
`policycoreutils-python-utils`. Only tested with debian
2024-10-08 08:29:52 +02:00
Martin Schurz 6cc57e1581 Don't run tests if the environment is not correct
Signed-off-by: Martin Schurz <[email protected]>
2024-10-07 23:02:51 +02:00
renovate[bot] 5a28783a53 chore(deps): update actions/checkout digest to eef6144
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-07 19:31:13 +00:00
dev-sec CI f3e012222a update changelog 2024-10-05 08:06:47 +00:00
Martin Schurz 3bdae0d98f Fix Changelog generation by adapting regex
Signed-off-by: Martin Schurz <[email protected]>
2024-10-05 10:04:07 +02:00
dev-sec CI 7faafb34de update changelog 2024-10-05 07:50:29 +00:00
schurzi 437546f4a9 Prettified Code! 2024-10-05 07:48:38 +00:00
Martin Schurz 1748396683 Fix Changelog
Signed-off-by: Martin Schurz <[email protected]>
2024-10-05 09:48:20 +02:00
dev-sec CI c185fa314f update changelog 2024-10-04 13:24:51 +00:00
dev-sec CI 5ef0c42d64 update os_hardening readme 2024-10-04 13:22:42 +00:00
schurzi 3daba1f3ee Merge pull request #797 from dev-sec/remdep
Remove unused files and variables
2024-10-04 15:22:15 +02:00
dev-sec CI ba5d025c82 update changelog 2024-10-04 11:31:17 +00:00
Martin Schurz 2b495bf6b9 Disable testing of audit in docker
Signed-off-by: Martin Schurz <[email protected]>
2024-10-04 13:29:17 +02:00
Martin Schurz 4c87d293ce Disable testing of audit in docker
Signed-off-by: Martin Schurz <[email protected]>
2024-10-04 13:29:17 +02:00
Martin Schurz 2e3d5e916b Remove unused files and variables
Signed-off-by: Martin Schurz <[email protected]>
2024-10-04 13:29:16 +02:00
schurzi 077900eadd Merge pull request #798 from dev-sec/vmvenv
Use Python venv for VM tests
2024-10-04 13:28:41 +02:00
Martin Schurz c705e50e0c Correct typo
Signed-off-by: Martin Schurz <[email protected]>
2024-10-04 12:23:18 +02:00
Martin Schurz 75158eb6d3 add Dependency
Signed-off-by: Martin Schurz <[email protected]>
2024-10-04 11:11:40 +02:00
Martin Schurz ecee5ffcbd Use Python venv for VM tests
Signed-off-by: Martin Schurz <[email protected]>
2024-10-04 11:07:42 +02:00
Martin Schurz 75f6b1a801 Use Python venv for VM tests
Signed-off-by: Martin Schurz <[email protected]>
2024-10-04 11:05:04 +02:00
renovate[bot] 6824eda2ba chore(deps): update ansible/ansible-lint digest to 3b5bee1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-19 18:20:52 +00:00
dev-sec CI d386d0fe1b update changelog 2024-09-15 19:44:24 +00:00
renovate[bot] e72f60e8e1 chore(deps): update dependency ansible-core to v2.17.4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-15 19:42:18 +00:00
dev-sec CI a1215c7bd4 update changelog 2024-09-15 14:38:12 +00:00
renovate[bot] 1536b61e32 chore(deps): update ansible/ansible-lint digest to 25f783c (#792)
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-15 16:36:49 +02:00
dev-sec CI 3f3e8cf2f2 update changelog 2024-09-04 08:38:54 +00:00
schurzi 83c5918339 Merge pull request #788 from dev-sec/renovate/actions-setup-python-digest
chore(deps): update actions/setup-python digest to f677139
2024-09-04 10:37:37 +02:00
renovate[bot] 4bf2d57013 chore(deps): update actions/setup-python digest to f677139
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-29 15:25:01 +00:00
dev-sec CI 683706a024 update changelog 2024-08-13 01:28:14 +00:00
renovate[bot] 81067084d1 chore(deps): update dependency ansible-core to v2.17.3
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-13 01:25:56 +00:00
dev-sec CI 7cac37de92 update changelog 2024-08-07 09:06:02 +00:00
renovate[bot]andMartin Schurz ea2fe100b5 chore(deps): update dependency ansible-core to v2.17.2 (#756)
* chore(deps): update dependency ansible-core to v2.17.2

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Downgrade Ansible version for Rocky 8

Signed-off-by: Martin Schurz <[email protected]>

* Downgrade Ansible version for Rocky 8

Signed-off-by: Martin Schurz <[email protected]>

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Martin Schurz <[email protected]>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Martin Schurz <[email protected]>
2024-08-07 11:04:39 +02:00
dev-sec CI 3e67f91dbd update galaxy.yml with new version 2024-08-06 17:25:36 +00:00
dev-sec CI cd9cdff971 update changelog 2024-08-06 17:23:31 +00:00
dev-sec CI 7ae5452355 update changelog 2024-08-06 17:12:44 +00:00
dev-sec CI 3250d179bc update nginx_hardening readme 2024-08-06 11:37:20 +00:00
dev-sec CI b1cff78ae2 update changelog 2024-08-06 11:14:16 +00:00