andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,187 Commits 14 Branches 64 Tags
296f46cc8088f2b0b2e00dbe2bcf5d107dbc4bd7
Commit Graph
2187 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dev-sec CI 7b209b831d update changelog 2023-12-07 08:34:58 +00:00
schurzi b9a0e65e19 Merge pull request #730 from dev-sec/labeler5 
update labeler to new config format
 2023-12-07 09:32:28 +01:00
schurzi e37f01df26 Merge pull request #732 from dev-sec/lintall 
Update ansible-lint action and revise configuration to scan all Ansible code
 2023-12-07 09:32:12 +01:00
Martin Schurz 1f0d2d5b73 add noconfirm 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 21:29:02 +01:00
Martin Schurz 5843b03449 add prepare for archlinux 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 20:29:43 +01:00
Martin Schurz bf51b96a0b add prepare for archlinux 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 20:21:49 +01:00
Martin Schurz 4bc5725836 hold grub updates in vm 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 17:51:39 +01:00
Martin Schurz 62340c79c6 re-add mysql config directory because it is needed by some os 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 16:33:31 +01:00
Martin Schurz bc8b5f60f4 remove mysql config directory creation 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 16:08:31 +01:00
Martin Schurz dff224f4c4 correct typo 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 15:57:08 +01:00
Martin Schurz 422fb940a9 manually fix remaining problems 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 15:27:21 +01:00
Martin Schurz 7e33ea0bae use ansible-lint to autofix problems 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 14:37:09 +01:00
renovate[bot] 459113a1e6 Update actions/setup-python action to v5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-12-06 13:19:19 +00:00
Martin Schurz 5381a23a4a fix paste error 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 11:38:49 +01:00
Martin Schurz e00716df62 fix lint findings 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 11:36:08 +01:00
Martin Schurz 6ce8b68650 adjust exclude paths 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 11:11:21 +01:00
Martin Schurz f4500457fa extend action triggers 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 11:09:24 +01:00
Martin Schurz 2bbfe2dd6b exclude waiver files 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 11:07:43 +01:00
Martin Schurz db437c79f5 extend action triggers 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 11:00:22 +01:00
Martin Schurz 099145c9b3 remove excludes 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 10:58:26 +01:00
Martin Schurz 9862676ecf use new ansible-lint action 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-06 10:57:45 +01:00
Martin Schurz 6ef52a125d use base branch 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-05 21:46:15 +01:00
Martin Schurz bde286fe47 update config 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-05 21:42:01 +01:00
Martin Schurz a58fc24301 use correct tag 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-05 21:38:36 +01:00
Martin Schurz 12240fea63 test labler 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-05 21:37:36 +01:00
Martin Schurz 82a0188b8c update labeler to new config format 
Signed-off-by: Martin Schurz <[email protected]>
 2023-12-05 21:31:37 +01:00
dev-sec CI 5a062c6db2 update changelog 2023-11-24 12:37:45 +00:00
schurzi 508b993570 Merge pull request #722 from dev-sec/arch_audit 
support restarts of audit service on Arch linux
 2023-11-24 13:36:18 +01:00
Martin Schurz 54f9ef42a1 don't try to restart audit in check mode 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-22 00:45:38 +01:00
Martin Schurz 25acb76c05 reload systemd after installation 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 23:59:22 +01:00
Martin Schurz 0f6b8e4a3a use full service name for handler 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 23:04:41 +01:00
Martin Schurz 571cec1a5c re-add vm tests 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 22:12:50 +01:00
Martin Schurz 20dd04c9cb split notify, add tmp options for arch 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 21:58:58 +01:00
Martin Schurz 60d10811d4 add separate handlers for audit restart 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 21:45:05 +01:00
Martin Schurz 84c43c0550 limit tests to some distros 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 21:27:23 +01:00
dev-sec CI c76862831b update changelog 2023-11-21 15:58:10 +00:00
schurzi f9a1cab023 Merge pull request #721 from dev-sec/python_version 
pin Ansible to always let Renovate update to the most current version in our tests
 2023-11-21 16:38:21 +01:00
Martin Schurz f15ff3fc83 remove unneeded mysql vars 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 16:37:50 +01:00
Martin Schurz aae720c977 update python version for all tests 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 12:23:49 +01:00
dev-sec CI af8045a55a update changelog 2023-11-21 11:23:22 +00:00
Martin Schurz c3b9245900 fix for mysql role 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 12:22:47 +01:00
Martin Schurz 5c5f2ce446 remove the base ansible package 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 12:22:47 +01:00
Martin Schurz 7b32deca17 pin the right ansible package 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 12:22:47 +01:00
Martin Schurz e2c2d0d5e2 pin Ansible version 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 12:22:47 +01:00
Martin Schurz addbbd32cf run tests on update of dependencied 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 12:22:47 +01:00
Martin Schurz 01cc9c811f update python versions for testing 
Signed-off-by: Martin Schurz <[email protected]>
 2023-11-21 12:22:47 +01:00
schurzi e98d766c6c Merge pull request #718 from akikanellis/fix-disabling-filesystems-idempotency 
Restore idempotency for disabling unused filesystems with Ansible 2.16.0
 2023-11-21 12:20:42 +01:00
Aki Kanellis a15159d072 Make disabling unused filesystems idempotent 
The `os_unused_filesystems` was lacking sorting, making the task not
idempotent. This was especially apparent and random in Molecule tests
when this collection was added as a dependency.

Signed-off-by: Aki Kanellis <[email protected]>
 2023-11-19 19:57:31 +00:00
dev-sec CI dc432ba71c update galaxy.yml with new version 2023-11-16 14:42:54 +00:00
dev-sec CI 2c91f89903 update nginx_hardening readme 2023-11-16 14:33:13 +00:00