andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,491 Commits 14 Branches 64 Tags
43b6402acf850ff9721cd7552f54b82eba798fa3
Commit Graph
2491 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dev-sec CI cb1ebe0ed8 update changelog 2024-11-30 12:51:53 +00:00
schurzi ca17c66742 Merge pull request #828 from dev-sec/readd_openbsd 
Change installation source for OpenBSD tests
 2024-11-30 13:50:41 +01:00
Martin Schurz c2712fc3d9 Change installation source for OpenBSD tests 
Signed-off-by: Martin Schurz <[email protected]>
 2024-11-30 12:54:11 +01:00
dev-sec CI 7d8e792175 update changelog 2024-11-22 21:03:35 +00:00
schurzi 00161845d2 Merge pull request #812 from dev-sec/renovate/actions-checkout-digest 
chore(deps): update actions/checkout digest to 11bd719
 2024-11-22 22:02:20 +01:00
dev-sec CI 2634c624df update changelog 2024-11-16 21:01:01 +00:00
renovate[bot] 74a121e774 chore(deps): update dependency ansible-core to v2.18.0 (#819) 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-11-16 20:51:01 +00:00
renovate[bot] 28f9ef09ed chore(deps): update actions/checkout digest to 11bd719 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-11-16 20:50:58 +00:00
dev-sec CI 674c7b4551 update changelog 2024-11-16 15:16:13 +00:00
renovate[bot] 3db0a70ccf chore(deps): update dependency aar-doc to v2.0.1 (#817) 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-11-16 15:14:57 +00:00
dev-sec CI fd5a8f39dd update changelog 2024-11-16 10:11:23 +00:00
schurzi f8e199b315 Merge pull request #825 from dev-sec/renovate/ansible-ansible-lint-digest 
chore(deps): update ansible/ansible-lint digest to 44be233
 2024-11-16 11:10:38 +01:00
Martin Schurz 577c87d07b Add space ... 2024-11-16 11:10:10 +01:00
Martin Schurz 9096046161 Disable OpenBSD Tests 2024-11-16 01:13:50 +01:00
dev-sec CI fe6a957a90 update changelog 2024-11-16 00:11:46 +00:00
schurzi 47ff6e41ac Merge pull request #814 from dev-sec/renovate/actions-setup-python-digest 
Update actions/setup-python digest to 0b93645
 2024-11-16 01:10:29 +01:00
renovate[bot] 069966702d Update ansible/ansible-lint digest to 44be233 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-11-13 15:12:00 +00:00
dev-sec CI ad79abb889 update changelog 2024-11-11 18:53:54 +00:00
dev-sec CI 82a84eec94 update ssh_hardening readme 2024-11-11 18:53:09 +00:00
Shizzlebix cb85a99e22 adding switch for ForwardAgent in ssh_config (#818) 
* Update openssh.conf.j2

add switch for FowardAgent

* Update openssh.conf.j2

fix typo

* Update openssh.conf.j2

change ssh_ForwardAgent to ssh_forward_agent

* Update argument_specs.yml

adding context for ssh_forward_agent
 2024-11-11 19:52:38 +01:00
dev-sec CI 96d318eaf4 update changelog 2024-11-06 19:20:39 +00:00
dependabot[bot] 5b28117d72 Bump ansible-core from 2.17.5 to 2.17.6 (#820) 
Bumps [ansible-core](https://github.com/ansible/ansible) from 2.17.5 to 2.17.6.
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](https://github.com/ansible/ansible/compare/v2.17.5...v2.17.6)

---
updated-dependencies:
- dependency-name: ansible-core
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-06 20:08:54 +01:00
renovate[bot] f2af5f0b52 chore(deps): update actions/setup-python digest to 0b93645 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-10-24 16:43:41 +00:00
dev-sec CI 8d9569cd71 update galaxy.yml with new version 2024-10-22 08:25:58 +00:00
dev-sec CI 259aa71946 update changelog 2024-10-22 08:24:08 +00:00
dev-sec CI 5015cda4f0 update nginx_hardening readme 2024-10-22 07:18:55 +00:00
dev-sec CI 532b7a70ea update ssh_hardening readme 2024-10-22 07:18:52 +00:00
dev-sec CI 8d336bcdfa update os_hardening readme 2024-10-22 07:18:45 +00:00
dev-sec CI 8fffcde096 update mysql_hardening readme 2024-10-22 07:18:42 +00:00
dev-sec CI 37785016d9 update changelog 2024-10-22 06:54:58 +00:00
schurzi 5d95dc7083 Merge pull request #810 from dev-sec/audit_name 
Add variable to set name_format for auditd
10.1.0 		2024-10-22 08:47:36 +02:00
Martin Schurz f70a74f99f Add variable to set name_format for auditd 
Signed-off-by: Martin Schurz <[email protected]>
 2024-10-22 08:46:23 +02:00
schurzi b6d11a0b19 Merge pull request #811 from dev-sec/py_version 
Pin python dependencies and optimize GitHub Actions
 2024-10-22 08:45:40 +02:00
Martin Schurz 92995bbee3 Sort matrix builds 
Signed-off-by: Martin Schurz <[email protected]>
 2024-10-22 08:44:39 +02:00
Martin Schurz 752a541507 Fix copy&paste error 
Signed-off-by: Martin Schurz <[email protected]>
 2024-10-21 20:06:14 +02:00
Martin Schurz 45193e9ff1 Pin python dependencies and optimize GitHub Actions 
Signed-off-by: Martin Schurz <[email protected]>
 2024-10-21 20:01:14 +02:00
dev-sec CI 7dab72c8c1 update changelog 2024-10-13 19:43:46 +00:00
rndmh3ro 8619b26b75 Prettified Code! 2024-10-13 19:42:40 +00:00
Sebastian Gumprich 7b112dcf87 feat(ssh): add alpine support (#809) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2024-10-13 21:42:28 +02:00
dev-sec CI cd9cf8f22a update changelog 2024-10-13 18:27:14 +00:00
dev-sec CI 08dfeedbc0 update os_hardening readme 2024-10-13 18:15:50 +00:00
dev-sec CI 759b746429 update ssh_hardening readme 2024-10-13 18:15:43 +00:00
dev-sec CI e6ea4f0b4c update mysql_hardening readme 2024-10-13 18:15:40 +00:00
dev-sec CI 94f05a971a update changelog 2024-10-13 18:14:26 +00:00
Sebastian Gumprich aa737011e4 fix(cicd): test idempotence on ssh custom tests (#807) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2024-10-13 20:12:21 +02:00
dev-sec CI 19ac284200 update nginx_hardening readme 2024-10-13 18:12:08 +00:00
Sebastian Gumprich 141efbc516 fix(ssh_hardening): test setting kex to false, remove wrong default (#808) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2024-10-13 20:11:47 +02:00
dev-sec CI 7cca65bc90 update changelog 2024-10-13 10:37:24 +00:00
rndmh3ro cfd4536868 Prettified Code! 2024-10-13 10:35:08 +00:00
seven-beep a97a54dc30 Provide granular noop for ssh configuration (#789) 
* Provide granular noop for shh configuration

We would like to have more fine grained options on applying or not specific configurations.

This commit let the user choose to noop some configuration with a few new
boolean variables.

Motivation for theses options are we may configure ourselves some (ssh host key
regeneration in a templating system) or we are not ready for others (ssh_kex
will break dist-upgrades, letting the operator without ssh).

Signed-off-by: seven beep <[email protected]>

* Provide granula noop for ssh configuration

We would like to have more fine grained options on applying or not specific configurations.

This commit let the user choose to disable configurations for `ssh_host_key_config`,
`ssh_ciphers_config`, `ssh_host_key_config`, `ssh_macs_config` by setting them
to False.

Motivation for theses options are we may configure ourselves some (ssh host key
regeneration in a templating system) or we are not ready for others (ssh_kex
will break dist-upgrades, letting the operator without ssh).

Signed-off-by: seven beep <[email protected]>

---------

Signed-off-by: seven beep <[email protected]>
 2024-10-13 12:34:52 +02:00