andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,232 Commits 14 Branches 64 Tags
69ab9e47ad3be4587170584476699c553db22aab
Commit Graph
4 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Paweł KrawczykPaweł KrawczykSebastian Gumprich
 		88ef3cf3af Parametrize more auditd.conf options (#535) 
* Parametrize more auditd.conf options

* Parametrize more auditd.conf options

* Add `os_auditd` options

* Add os_auditd_log_group

* Add os_auditd_log_group

Co-authored-by: Paweł Krawczyk <[email protected]>
Co-authored-by: Sebastian Gumprich <[email protected]>
 2023-01-19 13:45:24 +01:00
Paweł Krawczyk 66bd1f0aec Add CVE-2021-33909 mitigations (#466) 
* Add CVE-2021-33909 mitigations

kernel.unprivileged_bpf_disabled: 1
kernel.unprivileged_userns_clone: 0

The first one is also used by Tails.

Signed-off-by: Paweł Krawczyk <[email protected]>

* Clean up whitespaces

Signed-off-by: Paweł Krawczyk <[email protected]>
 2021-07-22 16:32:41 +02:00
Paweł Krawczyk 65c93ae6cb Remove trailing space (#261) 
ansible-lint marks my build red due to this
 2020-02-18 16:01:25 +01:00
Pawel Krawczyk 2ee1e2c1ac Remove trailing whitespaces (ansible-lint 201) 
Signed-off-by: Pawel Krawczyk <[email protected]>
 2020-01-14 18:02:34 +00:00