4 Commits

Include renames

Author	SHA1	Message	Date
Norman Ziegner	209ba1dabf	Consistently access facts via the ansible_facts.* namespace (#917) ... * ci: disable injecting facts as own vars in the main namespace Signed-off-by: Norman Ziegner <[email protected]> * Consistently access facts via the ansible_facts.* namespace Signed-off-by: Norman Ziegner <[email protected]> --------- Signed-off-by: Norman Ziegner <[email protected]>	2025-12-13 13:38:02 +01:00
3 people	89138be4ec	Rewrite system account detection and hardening and create tests (#621) ... * rewrite system account detection and hardening * resolve failures created when resolving merge conflicts Signed-off-by: Sebastian Gumprich <[email protected]> * add tests for shell removal tasks Signed-off-by: Sebastian Gumprich <[email protected]> * Update molecule/os_hardening/prepare.yml Signed-off-by: Martin Schurz <[email protected]> * split tasks for locking and setting shell Signed-off-by: Martin Schurz <[email protected]> * fix some more linting Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Martin Schurz <[email protected]> Co-authored-by: donestefan <[email protected]> Co-authored-by: schurzi <[email protected]>	2023-01-27 11:01:03 +01:00
stdtom	9d2c68ef2f	Preserve default ownership and dir mode for /var/log on Ubuntu (#615) ... * Preserve default ownership and dir mode for /var/log on Ubuntu Signed-off-by: stdtom <[email protected]> * linting Signed-off-by: stdtom <[email protected]> * Define vars for each OS instead of using defaults. Signed-off-by: stdtom <[email protected]> * Fix values for os_mnt_var_log_dir_mode and os_mnt_var_log_group Signed-off-by: stdtom <[email protected]> Signed-off-by: stdtom <[email protected]>	2023-01-23 09:34:41 +01:00
divialth	fb8b9142c8	rework filesystem hardening (#555) ... * rework filesystem hardening - removed a lot duplicated code by using a loop - added new hardening options for /tmp - added new options "passno" and "dump" for every filesystem. currently ansible changed that values to 0 for every fs new default depends on fstype, can be overwriten in config - removed default fstype in config the type will now be autodetected, can be overwriten in config - mount src setting is now optional the source will now be autodetected, can be overwriten in config - it will be now checked, if it is really a mount - changed fs reload to handler - removed check os_auditd_enabled on /var/log/audit Signed-off-by: divialth <[email protected]> * fix lint errors Signed-off-by: divialth <[email protected]> * implemented the name suggestions Signed-off-by: divialth <[email protected]> Signed-off-by: divialth <[email protected]>	2022-08-22 11:16:57 +02:00