andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,205 Commits 14 Branches 64 Tags
563f1833df69c609a38709e98fbfff7295de77ee
Commit Graph
2205 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Christoph Hartmann 00e652bb29 update common kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible) 
updating common files with changes that are configured in the profiles: kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
 2015-08-06 23:36:12 -07:00
Sebastian Gumprich 2bc353b7a9 Make MaxAuthTries configurable 2015-08-06 14:20:32 +00:00
Sebastian Gumprich 9befb22e13 Change oneliner if-statements to be more readable 2015-08-06 14:00:14 +00:00
Sebastian Gumprich df8b205a8f Change oneliner if-statements to be more readable 2015-08-06 13:53:33 +00:00
Christoph Hartmann 3a79dab5d8 Merge pull request #29 from ypid/make-client-pw-auth-configurable 
Make ssh client password login configurable.
 2015-08-04 09:17:45 -07:00
Robin Schneider 10f6544f3c Make ssh client password login configurable. 
Defaults to not allow which might be a bit restrictive.
 2015-08-04 15:17:50 +02:00
Christoph Hartmann ba7afdf938 Merge pull request #27 from hardening-io/template_case 
Fix join-filter, jinja-cases, intendation
 2015-07-30 02:00:19 -07:00
Sebastian Gumprich 60e898098d Fix join-filter, jinja-cases, spelling, whitespace 
- the join filter is replaced by '+'
- the if-cases for rhel-based OS'es is simplified
- intendation of complex if-cases
 2015-07-29 20:52:53 +00:00
Sebastian Gumprich bda8d52083 Merge pull request #26 from ypid/role-review 
Fixed role's join-filter, jinja-cases, spelling, whitespace
 2015-07-29 13:27:46 +00:00
Robin Schneider a2f4542a48 Short role review. Fixed role when ssh_client_weak_kex == true. 
* This role uses the Jinja2 `join` filter quite creatively, please fix this. This patch fixes one instance.
* Make full use of Jinja2 features. E.g. use `if ansible_os_family in ['Oracle Linux', 'RedHat']` for example. This patch fixes one instance.
* Fixed spelling.
* Removed whitespace.
 2015-07-28 21:21:32 +02:00
Christoph Hartmann ced954f51e Merge pull request #25 from ypid/client-server-disable 
Make it configurable to only harden ssh client/server or both (default).
 2015-07-28 12:18:35 -07:00
Robin Schneider a8f991bc07 Make it configurable to only harden ssh client/server or both (default). 2015-07-28 20:42:14 +02:00
Sebastian Gumprich a2c483ace8 Separate system-vars from editable vars. 
This change moves variables that can be changed or overridden by the user to the defaults-vars-files, where it belongs.
 2015-07-28 18:07:34 +00:00
Christoph Hartmann e0b1068e8c Merge pull request #24 from hardening-io/separate_vars 
Separate system-vars from editable vars
 2015-07-27 13:25:15 -07:00
Sebastian Gumprich 48fc334f71 Separate system-vars from editable vars 
This change moves variables that can be changed or overridden by the user to the defaults-vars-files, where it belongs.
 2015-07-27 21:04:38 +00:00
Christoph Hartmann 40c2d36ddb Merge pull request #35 from hardening-io/separate_vars 
Separate system-vars from editable vars. Fix #34
 2015-07-27 13:24:51 -07:00
Sebastian Gumprich a1425befeb Separate system-vars from editable vars. Fix #34 2015-07-27 20:47:23 +00:00
Christoph Hartmann 80d1e44776 Merge pull request #1 from hardening-io/add_test_readme 
Add documentation for testing, change value in vars
 2015-07-19 04:48:01 -07:00
Sebastian Gumprich daf8e4c45b Add documentation for testing, change value in vars 2015-07-18 20:57:58 +00:00
Christoph Hartmann 0bcb2f35ba Merge pull request #33 from hardening-io/create_limits_d 
Create limits.d-directory if it does not exist.
 2015-07-13 10:37:02 -07:00
Sebastian Gumprich b3af021cd9 Create limits.d-directory if it does not exist. 
See [here](https://github.com/hardening-io/chef-os-hardening/issues/84).
 2015-07-13 18:18:13 +00:00
Sebastian Gumprich dab153eb56 INITIAL 2015-07-02 18:32:22 +00:00
Sebastian Gumprich 5b15d01262 Add correct CONTRIB-file 
* Added the correct CONTRIBUTING.MD
* Fixed some typos
* Added Ansible information
 2015-06-26 16:52:02 +00:00
Christoph Hartmann 21375d32b5 Merge pull request #22 from hardening-io/contrib 
Add correct CONTRIB-file
 2015-06-26 07:59:51 -07:00
Christoph Hartmann 9f69e2889b Merge pull request #32 from hardening-io/contrib 
Add correct CONTRIB-file
 2015-06-26 07:59:29 -07:00
Sebastian Gumprich 3eacdb7a29 Add correct CONTRIB-file 
* Added the correct CONTRIBUTING.MD
* Fixed some typos
* Added Ansible information
 2015-06-26 16:48:56 +00:00
Sebastian Gumprich 30818ad67e Add Ansible Galaxy badge 2015-06-26 16:35:13 +00:00
Christoph Hartmann 565b481752 Merge pull request #31 from hardening-io/galaxy_badge 
Add Ansible Galaxy badge
 2015-06-26 07:41:34 -07:00
Sebastian Gumprich 78c8690677 Delete useless file 2015-06-26 14:39:56 +00:00
Christoph Hartmann 75dbf1cae6 Merge pull request #30 from hardening-io/CL_RM_TODO 
Update readme, todo, changelog, vars
 2015-06-24 06:40:28 -07:00
Sebastian Gumprich 348fb1cc53 Change var to true to remove pkgs by default 2015-06-24 10:21:13 +00:00
Christoph Hartmann e9a9a12b58 Merge pull request #28 from hardening-io/modules 
Add module configuration
 2015-06-23 15:45:58 -07:00
Christoph Hartmann 1ff8b21a03 update gitter url 2015-06-24 00:02:42 +02:00
Sebastian Gumprich 5e1e2513c5 Update readme, todo, changelog, vars 
* This commit updates the readme in several ways.
* It adds a todo-list and a changelog.
* It deletes unused variables
 2015-06-23 23:58:40 +02:00
Sebastian Gumprich c8d9ac84ef Add module configuration 2015-06-23 23:58:12 +02:00
Christoph Hartmann ac4754ff16 Merge pull request #29 from hardening-io/suid_fix 
List-cleanup and follow symlinks added
 2015-06-23 14:57:25 -07:00
Christoph Hartmann 068e5104ec Merge pull request #27 from hardening-io/sysctl_bugfix 
Fix two sysctl-settings
 2015-06-23 14:55:09 -07:00
Sebastian Gumprich f6cf4fcdf5 Fix another sysctl-setting due to new tests 2015-06-23 23:51:18 +02:00
Sebastian Gumprich 8ba37823f9 Fix two sysctl-settings 2015-06-23 23:51:18 +02:00
Sebastian Gumprich 88f4f17786 Added condition to suid/sgid-execution 2015-06-23 17:49:37 +00:00
Sebastian Gumprich 46b50769aa List-cleanup and follow symlinks added 
- This change alters the black- and white-listed list for
suid/sgid-management to be a proper yaml-formatted list.

- Furthermore "follow symlinks" was added to the tasks
that remove suid/sgid because otherwise the suid/sgid
from the link-targets would not be removed.
 2015-06-23 11:01:00 +00:00
Christoph Hartmann 412c544ed9 Merge pull request #26 from hardening-io/ansible_galaxy 
Add meta-files for Ansible Galaxy
 2015-06-22 23:23:36 -07:00
Christoph Hartmann 4e9e10fd37 Merge pull request #21 from hardening-io/add_galaxy_badge 
Add Ansible Galaxy badge
 2015-06-22 23:22:25 -07:00
Sebastian Gumprich 2f0cb6f320 Add Ansible Galaxy badge 2015-06-22 16:36:12 +00:00
Sebastian Gumprich 3a004c90dc Add meta-files for Ansible Galaxy 2015-06-22 16:02:42 +00:00
Christoph Hartmann 10267eb509 Merge pull request #23 from hardening-io/remove_authconfig 
Delete authconfig-task on rhel-systems
 2015-06-20 02:01:39 -07:00
Christoph Hartmann 3aa9a46466 Merge pull request #21 from hardening-io/rhosts 
Add missing rhosts-include task
 2015-06-20 02:01:05 -07:00
Sebastian Gumprich a345da0023 Delete authconfig-task on rhel-systems 
The authconfig-task overrides changes we later do on files, so this
task is not necessary and causes some tasks to always change files
 2015-06-19 11:51:23 +02:00
Sebastian Gumprich e4c6436163 Add missing rhosts-include task 2015-06-19 11:51:09 +02:00
Christoph Hartmann 71c7042163 Merge pull request #24 from hardening-io/result_override 
Use changed_when to avoid changed tasks
 2015-06-19 02:48:08 -07:00