andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,846 Commits 14 Branches 64 Tags
681898bd969c38710cf6cc6be92843fdb7a862f5
Commit Graph
12 Commits
Author SHA1 Message Date
Dennis Eriksen 681898bd96 OpenBSD does not support GSSAPIAuthentication 
... and freaks out when it is mentioned in the config files. So let's
just remove the GSSAPI-stuff.

Signed-off-by: Dennis Eriksen <[email protected]>
 2022-11-08 09:12:18 +01:00
Sebastian Gumprich 4ca4f09453 Cleanup old OS-support and simplify vars (#458) 
* use os_family instead of distribution for debian systems

Signed-off-by: rndmh3ro <[email protected]>

* remove tasks related to rhel6 or debian 6

Signed-off-by: rndmh3ro <[email protected]>
 2021-06-30 13:09:46 +02:00
alimliandHaldun ALIMLI 4f42e0d396 ssh_allow_tcp_forwarding remote option added (#447) 
Signed-off-by: Haldun ALIMLI <[email protected]>

Co-authored-by: Haldun ALIMLI <[email protected]>
 2021-04-30 14:49:42 +02:00
Maximilian Praeger 4399d3f885 removed: unneccessary conditional 
Signed-off-by: Maximilian Praeger <[email protected]>
 2021-01-22 07:24:54 +01:00
Maximilian Praeger 6b55b9619c added: comment for HostCertificate 
Signed-off-by: Maximilian Praeger <[email protected]>
 2021-01-22 07:24:54 +01:00
Maximilian Praeger 8f7bae533c fixed: add empty line after HostCertificate loop 
Signed-off-by: Maximilian Praeger <[email protected]>
 2021-01-22 07:24:54 +01:00
Maximilian Praeger 6e9247bde3 added: support for HostCertificate in sshd conf file 
Signed-off-by: Maximilian Praeger <[email protected]>
 2021-01-22 07:24:53 +01:00
Martin Schurz 0600cdae75 add "role" to comment 
Signed-off-by: Martin Schurz <[email protected]>
 2021-01-20 11:23:40 +01:00
Farid Joubbi 254b62d980 Added comment on top of template about which role modified the resulting file. https://github.com/dev-sec/ansible-collection-hardening/issues/345 
Signed-off-by: Farid Joubbi <[email protected]>
 2021-01-19 14:05:33 +01:00
Farid Joubbi 83e29b01f5 Removed Protocol statement in later versions of sshd, since the code … (#342) 
* Removed Protocol statement in later versions of sshd, since the code for SSH-1 has been removed in sshd.

Signed-off-by: Farid Joubbi <[email protected]>

* Prettified the generated ssh_config. No functional changes, removed spaces and orphan comments.

Signed-off-by: Farid Joubbi <[email protected]>

* Removed Protocol statement in later versions of sshd, since the code for SSH-1 has been removed in sshd.

Signed-off-by: Farid Joubbi <[email protected]>

* Removed blank lines and prettified ssh_config.

Signed-off-by: Farid Joubbi <[email protected]>

* Added note about setting sshd_authenticationmethods if ssh_server_password_login.

Signed-off-by: Farid Joubbi <[email protected]>

* Backticked true.

Signed-off-by: Farid Joubbi <[email protected]>
 2020-12-16 19:29:33 +01:00
Farid Joubbi 91424ac209 Improvements of comments in opensshd.conf.j2 #338 (#339) 
* Fixed some comments that had issues. See #338

* Cut some long comments into two rows for easier reading.

Signed-off-by: joubbi <[email protected]>
 2020-12-12 20:35:38 +01:00
Sebastian Gumprich a46642ee92 merge ssh-hardening role into collection 2020-11-07 21:46:45 +01:00