 Sebastian Gumprich
|
1005cc133a
|
Add ignore-vars. Change nologin-shell dep. on OS
|
2015-06-18 18:14:08 +00:00 |
|
|
Sebastian Gumprich
|
f82e7684c6
|
Added option to disable system accounts
|
2015-06-18 18:14:08 +00:00 |
|
|
Sebastian Gumprich
|
6f910c28d8
|
Use changed_when to avoid changed tasks
When a shell or command task, that only fetches data, gets executed,
the task will be marked as change, even though nothing changed.
This commit changes the behaviour of tasks that only fetch data.
For more info see here:
http://docs.ansible.com/playbooks_error_handling.html#overriding-the-changed-result
|
2015-06-18 13:42:29 +00:00 |
|
|
Sebastian Gumprich
|
e0fa80ac14
|
add missing spec-directory
|
2015-06-17 14:58:19 +00:00 |
|
|
Sebastian Gumprich
|
531a051ef9
|
Skip sysctl-tasks in travis-environment
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
be4a3d143e
|
another try on json-vars-file
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
7b8b009291
|
Change to yml-format of exceptions-file
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
46f933b83c
|
Change vars again
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
7b4cf48db2
|
Add another var
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
f207116292
|
Change execution to read vars from file
|
2015-06-17 12:11:59 +02:00 |
|
|
Sebastian Gumprich
|
913c2eedb8
|
Change net.ipv4.tcp_timestamps to not fail on travis.
|
2015-06-17 12:11:31 +02:00 |
|
|
Sebastian Gumprich
|
d8f83d0822
|
Revert "Merge branch 'master' of github.com:hardening-io/ansible-os-hardening"
This reverts commit a7e353275b, reversing
changes made to 194ea7497f.
|
2015-06-10 20:31:10 +00:00 |
|
|
Sebastian Gumprich
|
a7e353275b
|
Merge branch 'master' of github.com:hardening-io/ansible-os-hardening
|
2015-06-10 20:05:10 +00:00 |
|
|
Sebastian Gumprich
|
e70974ba16
|
Add os_security_kernel_enable_module_loading
|
2015-06-08 17:25:50 +00:00 |
|
|
Sebastian Gumprich
|
81c171a55a
|
Change sysctl-task. Fix #18
|
2015-06-06 18:35:09 +00:00 |
|
|
Sebastian Gumprich
|
989e5c2f42
|
Disable ipv6-deactivation for travis
|
2015-06-03 21:44:24 +02:00 |
|
|
Sebastian Gumprich
|
c8736a5655
|
Add travis-support
|
2015-06-03 21:44:24 +02:00 |
|
|
Sebastian Gumprich
|
b73ceae10d
|
Add missing condition
|
2015-06-01 21:47:36 +00:00 |
|
|
Sebastian Gumprich
|
7c121b7e2b
|
Add missing condition
|
2015-06-01 21:46:05 +00:00 |
|
|
Sebastian Gumprich
|
a4cd8dbe94
|
Merge branch 'suidsgid' of github.com:hardening-io/ansible-os-hardening
|
2015-06-01 21:45:34 +00:00 |
|
|
Sebastian Gumprich
|
255948feb3
|
Add conditions for various tasks. Fix #15
|
2015-06-01 20:33:35 +00:00 |
|
|
Sebastian Gumprich
|
fb59fab08f
|
Remove duplicate whitelist-check
|
2015-06-01 19:36:37 +00:00 |
|
|
Sebastian Gumprich
|
c5e470c2b6
|
Merge pull request #14 from hardening-io/fix-playbook-path
fix configuration of playbook path
|
2015-06-01 19:06:48 +00:00 |
|
|
Sebastian Gumprich
|
544779e26a
|
Add remove suid/sgid function
|
2015-06-01 14:50:22 +02:00 |
|
|
Sebastian Gumprich
|
e6f2253c49
|
replace sed with replace-module
|
2015-06-01 14:28:18 +02:00 |
|
|
Sebastian Gumprich
|
c9252b167f
|
add gpgcheck rhnplugin.conf, consolidate task
|
2015-06-01 14:28:18 +02:00 |
|
|
Sebastian Gumprich
|
66e258da7e
|
Add task to remove unused repos and pkgs
|
2015-06-01 14:28:17 +02:00 |
|
|
Sebastian Gumprich
|
95bb02edbe
|
Make tasks clearer
|
2015-06-01 14:23:13 +02:00 |
|
|
Sebastian Gumprich
|
1782dbf3fa
|
ignore RAs on Ipv6
See: https://github.com/hardening-io/puppet-os-hardening/blob/master/manifests/sysctl.pp#L66-L68
|
2015-06-01 10:59:37 +02:00 |
|
|
Sebastian Gumprich
|
e121eaea7d
|
Edit README to fit to os-hardening
|
2015-05-28 20:52:10 +00:00 |
|
|
Sebastian Gumprich
|
3dce747cd6
|
Revert "ignore RAs on Ipv6"
This reverts commit a91cbe0192.
|
2015-05-28 18:47:18 +00:00 |
|
|
Sebastian Gumprich
|
a91cbe0192
|
ignore RAs on Ipv6
Taken from here:
https://github.com/hardening-io/puppet-os-hardening/blob/master/manifests/sysctl.pp#L66-L68
|
2015-05-28 18:43:52 +00:00 |
|
|
Sebastian Gumprich
|
ef0a45ad84
|
Repair debian install script
|
2015-05-26 20:37:55 +00:00 |
|
|
Sebastian Gumprich
|
a305b94230
|
Add separated files
|
2015-05-26 19:53:55 +00:00 |
|
|
Sebastian Gumprich
|
79ca60bfa1
|
Separate tasks into multiple smaller files
|
2015-05-26 19:53:16 +00:00 |
|
|
Sebastian Gumprich
|
557109e35a
|
Separate the tasks into smaller files
|
2015-05-26 19:45:30 +00:00 |
|
|
Sebastian Gumprich
|
c2884687c8
|
Change tasks to use sed instead of lineinfile
|
2015-05-20 21:07:30 +00:00 |
|
|
Sebastian Gumprich
|
82fea53ba7
|
Enable gpg-check on all yum-repositories
|
2015-05-19 21:01:32 +00:00 |
|
|
Sebastian Gumprich
|
ee2056ccd0
|
Change playbook-path to accomodate test-repo
|
2015-05-19 21:00:12 +00:00 |
|
|
Sebastian Gumprich
|
6ab5c0c4a9
|
Merge pull request #3 from hardening-io/securetty-lines
treat securetty config as an array
|
2015-05-12 07:31:04 +02:00 |
|
|
Sebastian Gumprich
|
e097f02065
|
Add profile.conf configuration
|
2015-05-11 23:00:08 +02:00 |
|
|
Sebastian Gumprich
|
ef2ce77f53
|
Add securetty-template
|
2015-05-10 21:44:17 +00:00 |
|
|
Sebastian Gumprich
|
b78345fe0c
|
Add securetty-support
|
2015-05-10 21:43:26 +00:00 |
|
|
Sebastian Gumprich
|
b9cc7bf9d8
|
Further improvements, first push
|
2015-05-10 18:33:37 +00:00 |
|
|
Sebastian Gumprich
|
06d1464e95
|
Initial
|
2015-05-04 21:37:22 +00:00 |
|