 Christoph Hartmann
|
71c7042163
|
Merge pull request #24 from hardening-io/result_override
Use changed_when to avoid changed tasks
|
2015-06-19 02:48:08 -07:00 |
|
|
Sebastian Gumprich
|
1005cc133a
|
Add ignore-vars. Change nologin-shell dep. on OS
|
2015-06-18 18:14:08 +00:00 |
|
|
Sebastian Gumprich
|
f82e7684c6
|
Added option to disable system accounts
|
2015-06-18 18:14:08 +00:00 |
|
|
Sebastian Gumprich
|
6f910c28d8
|
Use changed_when to avoid changed tasks
When a shell or command task, that only fetches data, gets executed,
the task will be marked as change, even though nothing changed.
This commit changes the behaviour of tasks that only fetch data.
For more info see here:
http://docs.ansible.com/playbooks_error_handling.html#overriding-the-changed-result
|
2015-06-18 13:42:29 +00:00 |
|
|
Sebastian Gumprich
|
531a051ef9
|
Skip sysctl-tasks in travis-environment
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
e70974ba16
|
Add os_security_kernel_enable_module_loading
|
2015-06-08 17:25:50 +00:00 |
|
|
Sebastian Gumprich
|
81c171a55a
|
Change sysctl-task. Fix #18
|
2015-06-06 18:35:09 +00:00 |
|
|
Christoph Hartmann
|
645240998d
|
Merge pull request #16 from hardening-io/cnd_ip_fwd
Add conditions for various tasks. Fix #15
|
2015-06-03 12:35:43 -07:00 |
|
|
Sebastian Gumprich
|
7c121b7e2b
|
Add missing condition
|
2015-06-01 21:46:05 +00:00 |
|
|
Sebastian Gumprich
|
255948feb3
|
Add conditions for various tasks. Fix #15
|
2015-06-01 20:33:35 +00:00 |
|
|
Sebastian Gumprich
|
fb59fab08f
|
Remove duplicate whitelist-check
|
2015-06-01 19:36:37 +00:00 |
|
|
Sebastian Gumprich
|
544779e26a
|
Add remove suid/sgid function
|
2015-06-01 14:50:22 +02:00 |
|
|
Sebastian Gumprich
|
e6f2253c49
|
replace sed with replace-module
|
2015-06-01 14:28:18 +02:00 |
|
|
Sebastian Gumprich
|
c9252b167f
|
add gpgcheck rhnplugin.conf, consolidate task
|
2015-06-01 14:28:18 +02:00 |
|
|
Sebastian Gumprich
|
66e258da7e
|
Add task to remove unused repos and pkgs
|
2015-06-01 14:28:17 +02:00 |
|
|
Sebastian Gumprich
|
95bb02edbe
|
Make tasks clearer
|
2015-06-01 14:23:13 +02:00 |
|
|
Sebastian Gumprich
|
1782dbf3fa
|
ignore RAs on Ipv6
See: https://github.com/hardening-io/puppet-os-hardening/blob/master/manifests/sysctl.pp#L66-L68
|
2015-06-01 10:59:37 +02:00 |
|
|
Sebastian Gumprich
|
3dce747cd6
|
Revert "ignore RAs on Ipv6"
This reverts commit a91cbe0192.
|
2015-05-28 18:47:18 +00:00 |
|
|
Sebastian Gumprich
|
a91cbe0192
|
ignore RAs on Ipv6
Taken from here:
https://github.com/hardening-io/puppet-os-hardening/blob/master/manifests/sysctl.pp#L66-L68
|
2015-05-28 18:43:52 +00:00 |
|
|
Sebastian Gumprich
|
a305b94230
|
Add separated files
|
2015-05-26 19:53:55 +00:00 |
|
|
Sebastian Gumprich
|
79ca60bfa1
|
Separate tasks into multiple smaller files
|
2015-05-26 19:53:16 +00:00 |
|
|
Sebastian Gumprich
|
557109e35a
|
Separate the tasks into smaller files
|
2015-05-26 19:45:30 +00:00 |
|
|
Christoph Hartmann
|
01572d9041
|
Merge pull request #5 from hardening-io/yum
Enable gpg-check on all yum-repositories
|
2015-05-20 12:17:54 -07:00 |
|
|
Sebastian Gumprich
|
c2884687c8
|
Change tasks to use sed instead of lineinfile
|
2015-05-20 21:07:30 +00:00 |
|
|
Sebastian Gumprich
|
82fea53ba7
|
Enable gpg-check on all yum-repositories
|
2015-05-19 21:01:32 +00:00 |
|
|
Dominik Richter
|
226c2761f8
|
treat securetty config as an array
|
2015-05-11 23:06:34 +02:00 |
|
|
Sebastian Gumprich
|
e097f02065
|
Add profile.conf configuration
|
2015-05-11 23:00:08 +02:00 |
|
|
Sebastian Gumprich
|
ef2ce77f53
|
Add securetty-template
|
2015-05-10 21:44:17 +00:00 |
|
|
Sebastian Gumprich
|
b78345fe0c
|
Add securetty-support
|
2015-05-10 21:43:26 +00:00 |
|
|
Sebastian Gumprich
|
b9cc7bf9d8
|
Further improvements, first push
|
2015-05-10 18:33:37 +00:00 |
|
|
Sebastian Gumprich
|
06d1464e95
|
Initial
|
2015-05-04 21:37:22 +00:00 |
|