andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,571 Commits 14 Branches 64 Tags
284943b69979015a774d42e16b366288c76454a0
Commit Graph
55 Commits
Author SHA1 Message Date
Sebastian Gumprich f9bbdb20fe add install instructions 2021-02-25 07:57:55 +01:00
Martin Schurz c6114278a1 fix minimum required ansible version in docs 
Signed-off-by: Martin Schurz <[email protected]>
 2021-02-05 20:39:04 +01:00
Farid Joubbi 5675589e01 Sorted sysctl values and lists in READMEs alphabetically (No functional changes). (#371) 
* Add s's for consistency.

Signed-off-by: Farid Joubbi <[email protected]>

* Sort lists alphabetically.

Signed-off-by: Farid Joubbi <[email protected]>

* Sorted sysctl_config alphabetically.

Signed-off-by: Farid Joubbi <[email protected]>

* Sort removed protocols.

Signed-off-by: Farid Joubbi <[email protected]>

* Added dots in variable descriptions for the sake of consistency.

Signed-off-by: Farid Joubbi <[email protected]>

* Added dots in variable descriptions for the sake of consistency.

Signed-off-by: Farid Joubbi <[email protected]>
 2021-01-08 20:45:50 +01:00
Sebastian Gumprich faffddbf31 add a runtime.yml to declare minimum ansible version (#363) 
* add a runtime.yml to declare minimum ansible version

Signed-off-by: Sebastian Gumprich <[email protected]>

* add minimum ansible version to reamde

Signed-off-by: Sebastian Gumprich <[email protected]>

* Prettified Code!
 2020-12-26 21:27:19 +01:00
Sebastian Gumprich cade17ec30 fix typo 2020-11-11 21:54:31 +01:00
Sebastian Gumprich 6b03886b4b update readme to point to old role 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-11-11 20:44:35 +01:00
rndmh3ro c94d973527 Prettified Code! 2020-11-08 10:20:25 +00:00
Sebastian Gumprich ac3c12d264 move to collections 2020-11-07 21:19:43 +01:00
alegrey91andSebastian Gumprich a8e349913d Mount proc filesystem using hidepid option (#283) 
* Added task to mount proc fs using hidepid option

Signed-off-by: alessio <[email protected]>
Signed-off-by: alegrey91 <[email protected]>
Signed-off-by: alessio <[email protected]>

* Removed mount shell command due to ci problem

Signed-off-by: alegrey91 <[email protected]>
Signed-off-by: alessio <[email protected]>

* Added task to create mount point before to add fstab entry

Signed-off-by: alegrey91 <[email protected]>
Signed-off-by: alessio <[email protected]>

* Added check to ensure fstab exist

Signed-off-by: alegrey91 <[email protected]>
Signed-off-by: alessio <[email protected]>

* Modified task title

Signed-off-by: alegrey91 <[email protected]>
Signed-off-by: alessio <[email protected]>

* Fixed typo

Signed-off-by: alegrey91 <[email protected]>
Signed-off-by: alessio <[email protected]>

* Fixed typo

Signed-off-by: alegrey91 <[email protected]>
Signed-off-by: alessio <[email protected]>

* Fixed wrong indented lines

Signed-off-by: alegrey91 <[email protected]>
Signed-off-by: alessio <[email protected]>

* Removed useless tasks and improved variables use

Signed-off-by: alessio <[email protected]>

* removed ansible test tag

Signed-off-by: alessio <[email protected]>

* removed trailing whitespace

Signed-off-by: alessio <[email protected]>

* updated documentation

Signed-off-by: alessio <[email protected]>

* fixed typo

Signed-off-by: alessio <[email protected]>

* Update README.md

* Update vars/main.yml

Co-authored-by: Sebastian Gumprich <[email protected]>
 2020-07-21 22:35:50 +02:00
Sebastian Gumprich 990f95807f remove mention of gitter 2020-07-12 09:16:22 +02:00
Sebastian Gumprich 365d7389c7 add selinux options to the readme 2020-05-05 21:28:26 +02:00
Jared Ledvina 908d1faab7 Add kernel parameter information to README (#259) 
* Add kernel parameter information to README

Add initial documentation around configuring audit=1 to reduce the inaccuracies in the auditd logs. 
Closes https://github.com/dev-sec/ansible-os-hardening/issues/253

Signed-off-by: Jared Ledvina <[email protected]>

* Cleanup spellinng

Signed-off-by: Jared Ledvina <[email protected]>
 2020-01-25 17:08:00 +01:00
Jan Dittberner ce6af914c8 Make max_log_file_action for auditd configurable (#246) 
* Make max_log_file_action for auditd configurable

This commit allows to configure the max_log_file_action auf auditd to
avoid filling small /var/log partitions for systems that create many
audit log entries. Or run for a long period of time.

Signed-off-by: Jan Dittberner <[email protected]>

* Add os_auditd_max_log_file_action to README

Signed-off-by: Jan Dittberner <[email protected]>
 2019-11-07 16:19:42 +01:00
Jared Ledvina 03faef5a75 Update location of NSA RHEL 5 Guide 
closes https://github.com/dev-sec/ansible-os-hardening/issues/227

Updates the URL to the NSA Guide to the Secure Configuration of Red Hat Enterprise Linux 5 (version 4.2)

Signed-off-by: Jared Ledvina <[email protected]>
 2019-10-06 00:45:47 -04:00
Sebastian Gumprich 2b037fc1d9 add install instructions to readme 2019-04-29 16:48:52 +02:00
Chris McKee 9108a83a03 Add note about docker under warning 
Signed-off-by: Chris McKee <[email protected]>
 2019-03-29 01:44:23 +00:00
Ruslan Baratov 8e891f2575 Fix typo 
Signed-off-by: Ruslan Baratov <[email protected]>
 2019-03-19 19:28:59 +03:00
pmav99 f5ae581d71 [readme] Update documentation link 
The old link was no longer valid
 2019-01-17 17:06:32 +02:00
John Szivós df13320c73 ensure that permissions to su-binary are not restricted to root user and group only, if os_security_users_allow contains the value change_user 2018-10-11 20:38:02 +02:00
Sebastian Gumprich 67f16f166c add option to disable auditd 2018-09-16 20:56:48 +02:00
Sebastian Gumprich e439904fd0 update minimum ansible version 2018-08-01 21:08:16 +02:00
Tom Carchrae b215e4f6ba comment is wrong/misleading 2018-06-08 08:27:32 -07:00
Sebastian Gumprich 60c26e3b47 Update README.md 2018-04-29 12:48:21 +02:00
Sebastian Gumprich a002e5e6c9 Update README.md 2018-04-29 12:46:52 +02:00
Sebastian Gumprich a4e383795f Update README.md 2018-04-09 21:31:44 +02:00
Sebastian Gumprich 1159eb5f00 Update README.md 2018-03-15 15:59:42 +01:00
Sebastian Gumprich 79aaab36b6 Update README.md 2018-03-15 15:59:21 +01:00
Sebastian Gumprich aa0036a1c1 Update README.md 2018-03-14 17:19:26 +01:00
Thomas Fan 15b0c1726e Update syntax to 2.4 2018-01-23 14:55:36 -05:00
Sebastian Gumprich 19b8788a39 remove unused parameter from readme 2018-01-03 10:43:13 +01:00
Sebastian Gumprich a1727e24e4 Merge pull request #139 from dev-sec/fix_124 
update readme
 2017-12-23 15:35:34 +01:00
Manuel Prinz d429d53c60 Prevent disabling of filesystems via whitelist 2017-11-01 14:10:15 +01:00
Sebastian Gumprich 62d20e299f install modprobe package, 
check for modprobe

use apt and yum instead of package

Revert "use apt and yum instead of package"

This reverts commit 215a97b1867a7a8af5e0e64e9f77181d4c4a5050.

use latest to install kmod

run apt-get update
 2017-08-07 14:56:42 +02:00
Sebastian Gumprich 0fa457d967 update readme 2017-08-06 15:48:51 +02:00
Sebastian Gumprich a1a1371a83 update readme 2017-08-05 21:58:29 +02:00
Sebastian Gumprich 6d21d249b9 Merge pull request #120 from dev-sec/combined_sysctl 
add more sysctl settings, allow overwriting
 2017-06-27 20:59:04 +02:00
Sebastian Gumprich 0b8e42c5c6 remove 12.04 support 2017-06-27 15:03:22 +02:00
Sebastian Gumprich 7bbd479a9a Update README.md 2017-05-28 18:31:10 +02:00
Sebastian Gumprich 5c48c74f79 add more sysctl settings, allow overwriting 2017-05-07 15:12:31 +02:00
Sebastian Gumprich dfc505634b update min ansible version 2017-02-28 21:34:35 +01:00
Sebastian Gumprich a8f8cd083a Update README.md 2017-01-09 07:24:57 +01:00
Sebastian Gumprich accdeecde4 Local testing with Docker 
This PR changes the local testing method to docker by default, making
the tests significantly faster to execute.
 2016-06-28 18:32:33 +02:00
Sebastian Gumprich a6624db99d initial docker testing support 2016-06-28 18:29:30 +02:00
Vivek Agarwal e04ef11c05 Fix a formatting issue in readme. 2016-06-27 00:24:46 +05:30
Sebastian Gumprich 422489f5ca update meta file 2016-06-24 17:42:48 +02:00
Sebastian Gumprich 7746eca682 update readme for dev-sec, make vars a table 2016-05-22 18:18:21 +02:00
fitz123 e34775bdaa ufw_manage_defaults README 2016-05-20 03:35:43 +07:00
Sebastian Gumprich 8747be1d0d Move sysctl vars to defaults 2016-02-24 08:07:58 +01:00
Sebastian Gumprich 7eb8b4f3d3 Change directory layout. fix #48 
This change gets rid of the separate role dir
and puts everything into the root-directory, making
it possible to install the role via ansible galaxy.
 2015-10-21 20:52:46 +02:00
Sebastian Gumprich aa5dc8f8cc Update kitchen-ansible, remove separate debian install 
Due to the new kitchen-ansible version it is now
possible to install ansible on all major OS's via a
ansible omnibus script which is provided by
kitchen ansible. There's no more need to separate
the debian tests.
 2015-08-30 18:57:24 +02:00