Lukas Erlacher
3ccb3eb8de
Remove rsync from package blacklist
...
rsync was erroneously added to `os_security_packages_list` variable,
meaning it was uninstalled as a "package with known issues".
Fixes #141
2017-08-07 21:55:30 +02:00
Sebastian Gumprich
41feffdc17
add kitchen to os_ignore_user to fix #124
2017-08-07 21:53:56 +02:00
Sebastian Gumprich
ef1c718ba7
remove execshield on rhel7
2017-08-07 21:53:56 +02:00
Sebastian Gumprich
62d20e299f
install modprobe package,
...
check for modprobe
use apt and yum instead of package
Revert "use apt and yum instead of package"
This reverts commit 215a97b1867a7a8af5e0e64e9f77181d4c4a5050.
use latest to install kmod
run apt-get update
2017-08-07 14:56:42 +02:00
Sebastian Gumprich
f1df3a3c48
Merge pull request #134 from dev-sec/style
...
style update
2017-08-06 14:52:08 +02:00
Sebastian Gumprich
a957fb6245
style update
2017-08-04 22:23:12 +02:00
Sebastian Gumprich
bb85a92ff0
remove prelink, package-09
2017-08-04 21:45:33 +02:00
Sebastian Gumprich
5c48c74f79
add more sysctl settings, allow overwriting
2017-05-07 15:12:31 +02:00
Sebastian Gumprich
1d48b0d10a
change shadow owner in debian systems
2017-03-01 20:58:19 +01:00
Sebastian Gumprich
62a91011dd
add comments to variables
2016-10-24 14:11:43 +02:00
Sebastian Gumprich
ef9d3d8f7f
update template
2016-09-27 19:18:17 +02:00
Conor Schaefer
d4261388b5
Permits overriding permissions on /etc/shadow
...
To support a variety of distros, some of which recommend root:root 0600
permissions on the shadow file (RHEL-based) and others root:shadow
0640 (Debian-based), allow users to override the /etc/shadow owner,
group, and mode via a dict var.
2016-06-10 19:31:33 -07:00
fitz123
0f8937c9b0
all ufw variables included into defaults file
2016-05-21 12:17:39 +07:00
fitz123
2750d6e467
integrate ufw defaults management
2016-05-20 03:35:12 +07:00
Sebastian Gumprich
8747be1d0d
Move sysctl vars to defaults
2016-02-24 08:07:58 +01:00
Sebastian Gumprich
4b4b58c643
make sys_uid and sys_gid configurable
2016-01-31 13:18:29 +01:00
Sebastian Gumprich
0bba152a01
Expose list of packages to remove as an attribute
2016-01-02 22:19:30 +01:00
Sebastian Gumprich
13d056a0db
Add SINGLE and PROMPT parameters.
2015-12-20 16:57:02 +01:00
Sebastian Gumprich
7eb8b4f3d3
Change directory layout. fix #48
...
This change gets rid of the separate role dir
and puts everything into the root-directory, making
it possible to install the role via ansible galaxy.
2015-10-21 20:52:46 +02:00
Lukas Erlacher