 Christoph Hartmann
|
71c7042163
|
Merge pull request #24 from hardening-io/result_override
Use changed_when to avoid changed tasks
|
2015-06-19 02:48:08 -07:00 |
|
|
Christoph Hartmann
|
2fa4e7d94e
|
Merge pull request #25 from hardening-io/system_accs
Disable System Accounts. Fix #6
|
2015-06-19 02:45:53 -07:00 |
|
|
Sebastian Gumprich
|
1005cc133a
|
Add ignore-vars. Change nologin-shell dep. on OS
|
2015-06-18 18:14:08 +00:00 |
|
|
Sebastian Gumprich
|
f82e7684c6
|
Added option to disable system accounts
|
2015-06-18 18:14:08 +00:00 |
|
|
Sebastian Gumprich
|
6f910c28d8
|
Use changed_when to avoid changed tasks
When a shell or command task, that only fetches data, gets executed,
the task will be marked as change, even though nothing changed.
This commit changes the behaviour of tasks that only fetch data.
For more info see here:
http://docs.ansible.com/playbooks_error_handling.html#overriding-the-changed-result
|
2015-06-18 13:42:29 +00:00 |
|
|
Christoph Hartmann
|
e4fcace51a
|
Merge pull request #17 from hardening-io/travis
Add travis-support
|
2015-06-17 11:57:18 -07:00 |
|
|
Sebastian Gumprich
|
e0fa80ac14
|
add missing spec-directory
|
2015-06-17 14:58:19 +00:00 |
|
|
Sebastian Gumprich
|
531a051ef9
|
Skip sysctl-tasks in travis-environment
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
be4a3d143e
|
another try on json-vars-file
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
7b8b009291
|
Change to yml-format of exceptions-file
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
46f933b83c
|
Change vars again
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
7b4cf48db2
|
Add another var
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
f207116292
|
Change execution to read vars from file
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
913c2eedb8
|
Change net.ipv4.tcp_timestamps to not fail on travis.
|
2015-06-17 12:11:31 +02:00 |
|
|
Sebastian Gumprich
|
d8f83d0822
|
Revert "Merge branch 'master' of github.com:hardening-io/ansible-os-hardening"
This reverts commit a7e353275b, reversing
changes made to 194ea7497f.
|
2015-06-10 20:31:10 +00:00 |
|
|
Sebastian Gumprich
|
a7e353275b
|
Merge branch 'master' of github.com:hardening-io/ansible-os-hardening
|
2015-06-10 20:05:10 +00:00 |
|
|
Christoph Hartmann
|
194ea7497f
|
Merge pull request #20 from hardening-io/sysctl_restyle
Change sysctl-task. Fix #18
|
2015-06-09 12:58:17 -07:00 |
|
|
Sebastian Gumprich
|
e70974ba16
|
Add os_security_kernel_enable_module_loading
|
2015-06-08 17:25:50 +00:00 |
|
|
Sebastian Gumprich
|
81c171a55a
|
Change sysctl-task. Fix #18
|
2015-06-06 18:35:09 +00:00 |
|
|
Sebastian Gumprich
|
989e5c2f42
|
Disable ipv6-deactivation for travis
|
2015-06-03 21:44:24 +02:00 |
|
|
Sebastian Gumprich
|
c8736a5655
|
Add travis-support
|
2015-06-03 21:44:24 +02:00 |
|
|
Christoph Hartmann
|
67d04b3d7a
|
Merge pull request #12 from hardening-io/suidsgid
Add remove suid/sgid function
|
2015-06-03 12:37:40 -07:00 |
|
|
Christoph Hartmann
|
645240998d
|
Merge pull request #16 from hardening-io/cnd_ip_fwd
Add conditions for various tasks. Fix #15
|
2015-06-03 12:35:43 -07:00 |
|
|
Sebastian Gumprich
|
b73ceae10d
|
Add missing condition
|
2015-06-01 21:47:36 +00:00 |
|
|
Sebastian Gumprich
|
7c121b7e2b
|
Add missing condition
|
2015-06-01 21:46:05 +00:00 |
|
|
Sebastian Gumprich
|
a4cd8dbe94
|
Merge branch 'suidsgid' of github.com:hardening-io/ansible-os-hardening
|
2015-06-01 21:45:34 +00:00 |
|
|
Sebastian Gumprich
|
255948feb3
|
Add conditions for various tasks. Fix #15
|
2015-06-01 20:33:35 +00:00 |
|
|
Sebastian Gumprich
|
fb59fab08f
|
Remove duplicate whitelist-check
|
2015-06-01 19:36:37 +00:00 |
|
|
Sebastian Gumprich
|
c5e470c2b6
|
Merge pull request #14 from hardening-io/fix-playbook-path
fix configuration of playbook path
|
2015-06-01 19:06:48 +00:00 |
|
|
Sebastian Gumprich
|
544779e26a
|
Add remove suid/sgid function
|
2015-06-01 14:50:22 +02:00 |
|
|
Christoph Hartmann
|
57bb2e8c00
|
fix configuration of playbook path
|
2015-06-01 14:50:15 +02:00 |
|
|
Christoph Hartmann
|
c6121c227d
|
Merge pull request #11 from hardening-io/yum_rm_pkg
Add task to remove unused repos and pkgs
|
2015-06-01 05:49:20 -07:00 |
|
|
Sebastian Gumprich
|
e6f2253c49
|
replace sed with replace-module
|
2015-06-01 14:28:18 +02:00 |
|
|
Sebastian Gumprich
|
c9252b167f
|
add gpgcheck rhnplugin.conf, consolidate task
|
2015-06-01 14:28:18 +02:00 |
|
|
Sebastian Gumprich
|
66e258da7e
|
Add task to remove unused repos and pkgs
|
2015-06-01 14:28:17 +02:00 |
|
|
Christoph Hartmann
|
834d37ae66
|
Merge pull request #13 from hardening-io/sysctl_edit_names
Make tasks clearer
|
2015-06-01 05:24:13 -07:00 |
|
|
Sebastian Gumprich
|
95bb02edbe
|
Make tasks clearer
|
2015-06-01 14:23:13 +02:00 |
|
|
Christoph Hartmann
|
25a49bf688
|
Merge pull request #9 from hardening-io/ignore_ras
ignore RAs on Ipv6
|
2015-06-01 05:13:18 -07:00 |
|
|
Sebastian Gumprich
|
1782dbf3fa
|
ignore RAs on Ipv6
See: https://github.com/hardening-io/puppet-os-hardening/blob/master/manifests/sysctl.pp#L66-L68
|
2015-06-01 10:59:37 +02:00 |
|
|
Dominik Richter
|
e3ff097a51
|
Merge pull request #10 from hardening-io/readme
Edit README to fit to os-hardening
|
2015-05-29 11:25:02 +02:00 |
|
|
Sebastian Gumprich
|
e121eaea7d
|
Edit README to fit to os-hardening
|
2015-05-28 20:52:10 +00:00 |
|
|
Sebastian Gumprich
|
3dce747cd6
|
Revert "ignore RAs on Ipv6"
This reverts commit a91cbe0192.
|
2015-05-28 18:47:18 +00:00 |
|
|
Sebastian Gumprich
|
a91cbe0192
|
ignore RAs on Ipv6
Taken from here:
https://github.com/hardening-io/puppet-os-hardening/blob/master/manifests/sysctl.pp#L66-L68
|
2015-05-28 18:43:52 +00:00 |
|
|
Dominik Richter
|
a936f25e7e
|
Merge pull request #7 from hardening-io/separate_tasks
Separate tasks into multiple smaller files
|
2015-05-26 23:15:35 +02:00 |
|
|
Dominik Richter
|
fbdccf09f5
|
Merge pull request #8 from hardening-io/debian_install_script
Repair debian install script
|
2015-05-26 23:12:01 +02:00 |
|
|
Sebastian Gumprich
|
ef0a45ad84
|
Repair debian install script
|
2015-05-26 20:37:55 +00:00 |
|
|
Sebastian Gumprich
|
a305b94230
|
Add separated files
|
2015-05-26 19:53:55 +00:00 |
|
|
Sebastian Gumprich
|
79ca60bfa1
|
Separate tasks into multiple smaller files
|
2015-05-26 19:53:16 +00:00 |
|
|
Sebastian Gumprich
|
557109e35a
|
Separate the tasks into smaller files
|
2015-05-26 19:45:30 +00:00 |
|
|
Christoph Hartmann
|
01572d9041
|
Merge pull request #5 from hardening-io/yum
Enable gpg-check on all yum-repositories
|
2015-05-20 12:17:54 -07:00 |
|