andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,571 Commits 14 Branches 64 Tags
284943b69979015a774d42e16b366288c76454a0
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
rndmh3ro 369c2986c6 Prettified Code! 2021-03-22 10:23:03 +00:00
Sebastian Gumprichandschurzi bf82736787 Update roles/os_hardening/tasks/user_accounts.yml 
Co-authored-by: schurzi <[email protected]>
 2021-03-22 11:18:51 +01:00
Sebastian Gumprich f9bbdb20fe add install instructions 2021-02-25 07:57:55 +01:00
Sebastian Gumprich bbf992d9fc Create dependabot.yml 2021-02-22 10:22:38 +01:00
Sebastian Gumprich 6be31fbc3b do not install mysql python package on target host (#401) 
this package has to be installed on the host that executes the task

Signed-off-by: Sebastian Gumprich <[email protected]>
 2021-02-10 15:57:51 +01:00
Sebastian Gumprich 756839f8f0 make wrong password fail task (#400) 
* make wrong password fail task

Signed-off-by: Sebastian Gumprich <[email protected]>

* add name to fail task

Signed-off-by: Sebastian Gumprich <[email protected]>
 2021-02-10 15:55:08 +01:00
Sebastian Gumprich c55c1f21ed add restart handler variable for mysql role (#399) 
* add restart handler variable for mysql role

Signed-off-by: Sebastian Gumprich <[email protected]>

* add prettierignore file to ignore CHANGELOG

Signed-off-by: Sebastian Gumprich <[email protected]>
 2021-02-10 15:54:57 +01:00
rndmh3ro 0cfdb1954e Prettified Code! 2021-02-09 08:45:31 +00:00
Sebastian Gumprich faffddbf31 add a runtime.yml to declare minimum ansible version (#363) 
* add a runtime.yml to declare minimum ansible version

Signed-off-by: Sebastian Gumprich <[email protected]>

* add minimum ansible version to reamde

Signed-off-by: Sebastian Gumprich <[email protected]>

* Prettified Code!
 2020-12-26 21:27:19 +01:00
Sebastian Gumprich 5341f2a891 Update release.yml 2020-12-15 11:35:54 +01:00
Sebastian Gumprich 753e517678 fix second changelog generation task, too (#349) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-12-15 10:10:10 +01:00
Sebastian Gumprich 253c5ec3eb fix changelog generation (#341) 
* fix changelog generation

the changelog generation fails because we merged other repos into
this one and these commits do not share a common ancestor.
see this issue: https://github.com/github-changelog-generator/github-changelog-generator/issues/665

to workaround this, we change the changelog generation so all tags older than 7.0.0 will be ignored
(--since-tag does not work here because it still works on all tags). This however will remove
 older releases from the changelog so we move these old releases into a separate file.
this is okay for me since these old releases are for ansible-os-hardening  and not the collection.
the new changelog file will contain all changes since 7.0.0.

Signed-off-by: Sebastian Gumprich <[email protected]>

* fix regex in action

Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-12-15 09:58:19 +01:00
Sebastian Gumprich 837f99bdf8 update release action 2020-12-13 20:19:03 +01:00
Sebastian Gumprich cade17ec30 fix typo 2020-11-11 21:54:31 +01:00
rndmh3ro 1cf8a6380d Prettified Code! 2020-11-11 20:34:34 +00:00
Sebastian Gumprich 2f19ad1ce2 fix typo in galaxy (#332) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-11-11 21:26:46 +01:00
Sebastian Gumprich 90151c3047 update galaxy version 2020-11-11 21:10:21 +01:00
rndmh3ro c94d973527 Prettified Code! 2020-11-08 10:20:25 +00:00
Sebastian Gumprich 81f1d3df6c Merge pull request #58 from szEvEz/master 
Run ansible-lint via github action
 2020-10-18 14:52:28 +02:00
Sebastian Gumprich 35695d979e Merge pull request #57 from szEvEz/master 
Fix kitchen and travisci for major distros
 2020-10-17 14:05:34 +02:00
Sebastian Gumprich daa49d0f47 Merge pull request #55 from dev-sec/fix_vars 
fix missing variables
 2020-10-13 05:23:20 +02:00
Sebastian Gumprich 3cf833f033 Merge pull request #56 from szEvEz/master 
Use mysql_query module instead of temporary files
 2020-10-11 17:53:13 +02:00
Sebastian Gumprich be67e73a7e this brings the task in line with the baseline (#311) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-10-05 10:50:07 +02:00
Sebastian Gumprich e54061bcd5 Merge pull request #53 from dev-sec/update_docs 
update readme to new layout for vars
 2020-10-03 08:23:59 +02:00
Sebastian Gumprich 1e115d9eeb update readme to new layout for vars (#33) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-10-03 08:18:22 +02:00
Sebastian Gumprich e6f5d0bb69 update readme to new layout for vars (#326) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-10-03 08:17:48 +02:00
Sebastian Gumprich 2f9febef4e Merge pull request #51 from dev-sec/modesagain 
add mode to copy task
 2020-09-21 07:34:27 +02:00
Sebastian Gumprich ab0e5783b9 use touch with no date changes (#310) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-09-20 14:27:09 +02:00
Sebastian Gumprich bfc80e8cfd Merge pull request #50 from dev-sec/modes 
add modes to template and file tasks
 2020-09-19 15:04:15 +02:00
Sebastian Gumprich 5c91da696a do not touch sysctl file to avoid idempotency problems (#309) 2020-09-19 14:36:57 +02:00
Sebastian Gumprich fa2cf790f8 Merge pull request #320 from dev-sec/pam 
add separate option for controlling motd via pam
 2020-08-09 17:02:02 +02:00
Sebastian Gumprich 04d19fd195 fix typo 2020-08-03 21:28:23 +02:00
Sebastian Gumprich f1a65f5f44 Merge pull request #318 from dev-sec/fix_kitchen 
fix local kitchen tests
 2020-07-28 09:24:22 +02:00
Sebastian Gumprich f50f22ca66 Merge pull request #294 from aqw/master 
add SmartOS support
 2020-07-28 08:30:17 +02:00
Sebastian Gumprich 65a8fa0c6c move hidepid vars into defaults so theyre overwritable (#285) 
fixes #284

Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-07-22 21:27:25 +02:00
Sebastian Gumprich 3b75e49c0e fix typo 2020-07-20 11:52:22 +02:00
Sebastian Gumprich 8806f9f06a fix typo 2020-07-18 10:27:21 +02:00
Sebastian Gumprich b4b306484b Merge pull request #307 from nununo/master 
README: New section on server port and idempotency
 2020-07-13 18:52:38 +02:00
Sebastian Gumprich cb407267c0 remove mention of gitter 2020-07-12 09:16:53 +02:00
Sebastian Gumprich 4494ddd132 remove mention of gitter 2020-07-12 09:16:33 +02:00
Sebastian Gumprich 990f95807f remove mention of gitter 2020-07-12 09:16:22 +02:00
Sebastian Gumprich 8e7ce74953 remove mention of gitter 2020-07-12 09:16:04 +02:00
Sebastian Gumprich 147a26c27a Merge pull request #305 from dev-sec/order_crypto 
add blocks to crypto.yml checks
 2020-07-09 13:52:21 +02:00
Sebastian Gumprich fda42b7022 Merge branch 'master' into order_crypto 2020-07-09 13:40:39 +02:00
Sebastian Gumprich 4c248a4901 remove obsolete include_task 2020-07-09 13:33:19 +02:00
Sebastian Gumprich 41aef7eb80 Merge pull request #304 from dev-sec/fix_typo 
fix typo in hardening.yml
 2020-07-09 08:20:03 +02:00
Sebastian Gumprich 22580d853f Merge pull request #301 from dev-sec/fix_fedora_tests 
fix package install in tests
 2020-07-06 09:44:10 +02:00
Sebastian Gumprich 5b96f66835 Merge pull request #300 from divialth/feature/customize_sshd_x11forward 
allow customization of X11Forwarding
 2020-07-06 08:36:07 +02:00
Sebastian Gumprich 4d34d24c32 install procps in debian so sysctl.conf exists (#282) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-07-05 19:01:21 +02:00
Sebastian Gumprich d06c87386f Merge pull request #298 from dev-sec/rndmh3ro-patch-2 
add centos 8 to meta
 2020-06-25 13:44:17 +02:00
Sebastian Gumprich 573f2483f5 add centos 8 to meta 2020-06-25 13:43:43 +02:00
Sebastian Gumprich 3f962b540f Merge pull request #290 from aisbergg/harmonize-style 
Harmonize style
 2020-06-20 09:07:04 +02:00
Sebastian Gumprich ce41b9f89a Merge branch 'master' into harmonize-style 2020-06-20 08:56:47 +02:00
Sebastian Gumprich b27c679a51 Merge pull request #291 from djesionek/master 
Add archlinux support
 2020-06-18 20:55:56 +02:00
Sebastian Gumprich 7621bca63b Merge pull request #46 from dev-sec/unify_actions 
unify changelog and release actions
 2020-06-06 10:25:57 +02:00
Sebastian Gumprich ab8ba4c6a4 unify changelog and release actions (#29) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-06-06 10:25:55 +02:00
Sebastian Gumprich 1e9df18b64 Merge pull request #289 from dev-sec/unify_actions 
unify changelog and release actions
 2020-06-06 10:25:53 +02:00
Sebastian Gumprich c31ad460ff unify changelog and release actions (#279) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-06-06 10:18:18 +02:00
Sebastian Gumprich 3480143584 Merge pull request #288 from jeanmonet/patch-1 
`ssh_allow_tcp_forwarding`: use quotes for values
 2020-06-04 06:48:03 +02:00
Sebastian Gumprich 21bec11b09 Merge pull request #287 from dev-sec/chris-rock/customize-ssh-params 
allow customization of login gracetime and max sessins
 2020-06-02 08:57:30 +02:00
Sebastian Gumprich 2c0fb49dee Merge pull request #284 from aqw/master 
make ssh client-side compression configurable
 2020-05-18 10:33:45 +02:00
Sebastian Gumprich 3b53c5a60f add changelog and release workflow (#28) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-05-09 20:29:09 +02:00
Sebastian Gumprich 49af2e059d Merge pull request #45 from dev-sec/workflows 
add changelog and release workflow
 2020-05-09 20:28:47 +02:00
Sebastian Gumprich 5f741a6f9a Update release.yml 2020-05-09 20:26:19 +02:00
Sebastian Gumprich e060504f48 Update release.yml 2020-05-09 20:26:09 +02:00
Sebastian Gumprich 9e04f7bc1e Update release.yml 2020-05-09 20:21:38 +02:00
Sebastian Gumprich 4c5fa242bd Update release.yml 2020-05-09 20:21:22 +02:00
Sebastian Gumprich 1e6787204a add changelog and release workflow (#271) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-05-09 20:07:36 +02:00
Sebastian Gumprich 0995761706 Merge pull request #282 from dev-sec/workflows 
add changelog and release workflow
 2020-05-09 19:50:59 +02:00
Sebastian Gumprich cc1df7af7b Update main.yml 2020-05-09 14:02:26 +02:00
Sebastian Gumprich 46204a99ab Update main.yml 2020-05-09 14:02:18 +02:00
Sebastian Gumprich f4cdcc0251 Merge pull request #281 from kostasns/fix_fedora_build 
fix: Ansible part of Fedora build
 2020-05-09 14:00:31 +02:00
Sebastian Gumprich 12f5a8c56a Merge pull request #280 from dev-sec/rndmh3ro-patch-1 
Add changelog action
 2020-05-08 19:40:28 +02:00
Sebastian Gumprich fc209f5838 Update main.yml 2020-05-08 19:39:44 +02:00
Sebastian Gumprich 6b1233b3cd Create main.yml 2020-05-08 19:36:40 +02:00
Sebastian Gumprich 9255b22c32 Merge pull request #278 from kostasns/issue_243 
feat: Allow to set custom list of HostKeyAlgorithms
 2020-05-08 19:27:28 +02:00
Sebastian Gumprich e1688e4766 Merge pull request #279 from kostasns/fix_amazon_build 
fix: Amazon linux build
 2020-05-08 19:24:04 +02:00
Sebastian Gumprich 07d39172b6 Merge pull request #277 from kostasns/ansible_facts 
fix(ansible_facts): replace few remaining facts from 'ansible_' to using 'ansible_facts' dictionary
 2020-05-08 19:23:15 +02:00
Sebastian Gumprich 1aa132f9ea github action for changelog generation 2020-05-05 22:30:49 +02:00
Sebastian Gumprich b6d65a504a Merge pull request #44 from shadinaif/shadinaif/python3-mysqldb-for-ubuntu-20.04 
Use python3-mysqldb for Ubuntu 20.04
 2020-04-28 20:50:17 +02:00
Sebastian Gumprich 63ddfd8948 Merge pull request #274 from paulfantom/patch-1 
vars: remove empty main.yml file
 2020-04-21 09:50:19 +02:00
Sebastian Gumprich 3de3975a91 Merge pull request #273 from ancoron/feature/ubuntu-dynamic-motd-banner 
Disable also dynamic MOTD via PAM if enabled - refs #271
 2020-04-18 15:32:14 +02:00
Sebastian Gumprich 4a97d4dc29 Merge pull request #270 from foonix/rhel6-sha2-hmacs 
Use sha2 HMACs on RHEL 6 / CentOS 6.
 2020-04-13 16:26:36 +02:00
Sebastian Gumprich 78fc2befff Merge pull request #269 from dennisse/master 
Removing 2fa
 2020-03-27 20:00:38 +01:00
Sebastian Gumprich 31c4895547 Merge pull request #267 from jbronn/moduli-when-hardening 
Only manage moduli when hardening server
 2020-03-10 16:42:29 +01:00
Sebastian Gumprich 32532bae9a add ansible-lint 2020-02-18 17:52:53 +01:00
Sebastian Gumprich be3317da94 add ansible-lint 2020-02-18 17:52:21 +01:00
Sebastian Gumprich d68169dca7 Merge pull request #43 from dev-sec/rndmh3ro-patch-1 
add ansible-lint
 2020-02-18 17:51:43 +01:00
Sebastian Gumprich f430284b8a add ansible-lint (#262) 
* Update .travis.yml
 2020-02-18 17:51:34 +01:00
Sebastian Gumprich 20eacfabf7 Update .travis.yml 2020-02-18 17:44:51 +01:00
Sebastian Gumprich ed3748ff59 Merge pull request #266 from kljensen/remove-bash-dep 
Do not use bash to get ssh version
 2020-02-13 22:24:45 +01:00
Sebastian Gumprich 767540b5a0 Merge pull request #263 from abtreece/remove-comment-from-sshd-hostkey-param 
Remove comment from sshd config HostKey param
 2020-01-24 20:06:14 +01:00
Sebastian Gumprich 4ee9bf2224 Merge pull request #254 from lunarthegrey/patch-1 
Support KEX for OpenSSH 8.0+ & quantum resistant KEX
 2020-01-17 19:26:23 +01:00
Sebastian Gumprich aa3ceed887 Merge pull request #254 from kravietz/master 
Remove trailing whitespaces (ansible-lint 201)
 2020-01-15 11:06:19 +01:00
Sebastian Gumprich d1824a8417 Merge pull request #257 from brnck/tcp_options 
Add 'all', 'local', 'yes', 'no' options support for AllowTcpForwarding variable
 2019-12-01 14:05:52 +01:00
Sebastian Gumprich 9f11c47730 Revert "Add exception in sysctl task (#240)" (#242) 
This reverts commit 3e14d45d0c.
 2019-10-28 21:02:24 +01:00
Sebastian Gumprich 21e442c65c Merge pull request #252 from Slamdunk/patch-1 
SFTP: set default umask to 0027
 2019-10-18 11:32:49 +02:00
Sebastian Gumprich 33a85b2e21 Merge pull request #40 from deefour/patch/fix-bare-variable-deprecation 
use bool filter on bare variable to address Ansible 2.8 deprecation warning
 2019-10-17 21:47:00 +02:00
Sebastian Gumprich 804538ebd7 Merge pull request #236 from jaredledvina/feature/allow-configuring-selinux-status 
Support configuring SELinux and default to enforcing
 2019-10-17 21:32:38 +02:00
Sebastian Gumprich 9286eedc47 Merge pull request #251 from szEvEz/separate-vars 
Separate PermitUserEnviroment from AcceptEnv
 2019-10-15 19:32:03 +02:00