 Sebastian Gumprich
|
f56d80b5d8
|
Replace ssh_keys group in Fedora with root (#677)
* Replace ssh_keys group in Fedora with root
In Fedora 38, the `ssh_keys` group was removed. root is used now, in accordance to upstream.
See: https://www.spinics.net/lists/fedora-devel/msg307707.html
See: https://src.fedoraproject.org/rpms/openssh/pull-request/37#
Signed-off-by: Sebastian Gumprich <[email protected]>
* change host key mode and owner in fedora and rhel9
Signed-off-by: Sebastian Gumprich <[email protected]>
* add missing host mode for rhel7
Signed-off-by: Sebastian Gumprich <[email protected]>
* harden all ssh host keys
Signed-off-by: Sebastian Gumprich <[email protected]>
* skip linting rule
Signed-off-by: Sebastian Gumprich <[email protected]>
* correct grp for bsd is wheel
Signed-off-by: Sebastian Gumprich <[email protected]>
---------
Signed-off-by: Sebastian Gumprich <[email protected]>
|
2023-06-10 08:04:04 +02:00 |
|
|
|
89138be4ec
|
Rewrite system account detection and hardening and create tests (#621)
* rewrite system account detection and hardening
* resolve failures created when resolving merge conflicts
Signed-off-by: Sebastian Gumprich <[email protected]>
* add tests for shell removal tasks
Signed-off-by: Sebastian Gumprich <[email protected]>
* Update molecule/os_hardening/prepare.yml
Signed-off-by: Martin Schurz <[email protected]>
* split tasks for locking and setting shell
Signed-off-by: Martin Schurz <[email protected]>
* fix some more linting
Signed-off-by: Sebastian Gumprich <[email protected]>
Signed-off-by: Sebastian Gumprich <[email protected]>
Signed-off-by: Martin Schurz <[email protected]>
Co-authored-by: donestefan <[email protected]>
Co-authored-by: schurzi <[email protected]>
|
2023-01-27 11:01:03 +01:00 |
|
|
Sebastian Gumprich
|
bb588bd777
|
linting (#603)
* linting
Signed-off-by: Sebastian Gumprich <[email protected]>
* more linting
Signed-off-by: Sebastian Gumprich <[email protected]>
* change line length issues
Signed-off-by: Sebastian Gumprich <[email protected]>
* replace yes with true in tasks
Signed-off-by: Sebastian Gumprich <[email protected]>
* use manual line-wrapping because ansible-lint does not support it correctly.
see https://github.com/ansible/ansible-lint/issues/2522
* use manual line-wrapping because ansible-lint does not support it correctly.
see https://github.com/ansible/ansible-lint/issues/2522
Signed-off-by: Sebastian Gumprich <[email protected]>
* use manual line-wrapping because ansible-lint does not support it correctly.
see https://github.com/ansible/ansible-lint/issues/2522
Signed-off-by: Sebastian Gumprich <[email protected]>
* add exception for task
Signed-off-by: Sebastian Gumprich <[email protected]>
* remove trailing whitespace
* add back deleted params
Signed-off-by: Sebastian Gumprich <[email protected]>
* add back deleted params
Signed-off-by: Sebastian Gumprich <[email protected]>
* add back tasks
Signed-off-by: Sebastian Gumprich <[email protected]>
|
2023-01-24 12:40:27 +01:00 |
|
|
schurzi
|
a1b80fe657
|
adopt all current suggestions from ansible-lint (#592)
|
2022-10-24 09:42:23 +02:00 |
|
|
Sebastian Gumprich
|
9b50392d8a
|
fix linting
Signed-off-by: Sebastian Gumprich <[email protected]>
|
2022-07-07 16:12:06 +02:00 |
|
|
Sebastian Gumprich
|
215c50709b
|
tempt
|
2022-07-07 15:34:28 +02:00 |
|
|
Sebastian Gumprich
|
a8fdf2de0a
|
fix linting errors
Signed-off-by: Sebastian Gumprich <[email protected]>
|
2022-07-07 14:59:39 +02:00 |
|