ansible-collection-hardening

0 Fork 0

Author	SHA1	Message	Date
Sebastian Gumprich	85aa1b22b3	do not force type of ssh_gateway_ports (#765 ) * do not force type of gatewayports-var this way it can be a bool or a string. we also now test for it Signed-off-by: Sebastian Gumprich <[email protected]> * replace yum with dnf Signed-off-by: Sebastian Gumprich <[email protected]> --------- Signed-off-by: Sebastian Gumprich <[email protected]>	2024-05-31 12:20:00 +02:00
Sebastian Gumprich	296f46cc80	centos7 is eol, remove it (#767 ) * centos7 is eol, remove it Signed-off-by: Sebastian Gumprich <[email protected]> * change workflow to update readmes when meta/main.yml is changed Signed-off-by: Sebastian Gumprich <[email protected]> * remove mention of centos 7 from readme Signed-off-by: Sebastian Gumprich <[email protected]> --------- Signed-off-by: Sebastian Gumprich <[email protected]>	2024-05-31 11:25:01 +02:00
Sebastian Gumprich	346ead4455	fix spelling Signed-off-by: Sebastian Gumprich <[email protected]>	2024-05-30 15:07:27 +02:00
Sebastian Gumprich	f3a1fcc16a	fix spelling Signed-off-by: Sebastian Gumprich <[email protected]>	2024-05-30 15:01:33 +02:00
Sebastian Gumprich	81e177b80c	release only on releases, not pre-releases (#738 )	2023-12-22 10:54:13 +01:00
Sebastian Gumprich	05cc027919	fix linting for github config (#736 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2023-12-08 09:31:05 +01:00
Sebastian Gumprich	2db75b53c1	make it possible to configure more then yes and no for PermitTunnel (#715 ) This is a breaking change, since the default variable is now a string instead of a bool Signed-off-by: Sebastian Gumprich <[email protected]>	2023-11-16 15:20:22 +01:00
rndmh3ro	a08a057f7b	Prettified Code!	2023-10-23 10:24:09 +00:00
Sebastian Gumprich	787ac9bd54	fix some wrong defaults and types in the readmes (#703 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2023-10-23 12:23:49 +02:00
Sebastian Gumprich	3bdd8c851e	test debian12 on VM (#695 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2023-09-22 09:22:27 +02:00
rndmh3ro	965c9326d0	Prettified Code!	2023-08-24 13:22:18 +00:00
Sebastian Gumprich	9c5b619149	fix descrptions in readme (#693 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2023-08-24 15:21:57 +02:00
Sebastian GumprichandSebastian Gumprich	e3273a8d54	disable pam tests (#691 ) Signed-off-by: Sebastian Gumprich <[email protected]> Co-authored-by: Sebastian Gumprich <[email protected]>	2023-08-07 14:38:44 +02:00
rndmh3ro	c1a0bcbe9d	Prettified Code!	2023-08-07 12:31:26 +00:00
Sebastian GumprichandSebastian Gumprich	f295397611	add role argument spec for os, ssh, mysql (#687 ) * add role argument spec for os, ssh, mysql Signed-off-by: Sebastian Gumprich <[email protected]> * add role argument spec for os, ssh, mysql Signed-off-by: Sebastian Gumprich <[email protected]> * remove variable in variable as it cannot be used in argument spec Signed-off-by: Sebastian Gumprich <[email protected]> * fix wrong syntax * fix spelling errors Signed-off-by: Sebastian Gumprich <[email protected]> * cannot use vars before arg-spec validation Signed-off-by: Sebastian Gumprich <[email protected]> * yamllint the arg-spec Signed-off-by: Sebastian Gumprich <[email protected]> * add back variable Signed-off-by: Sebastian Gumprich <[email protected]> * remove redundant setting in tests * fix descriptions in mysql hardening to betterreflect what they do Signed-off-by: Sebastian Gumprich <[email protected]> * remove duplicate empty line Signed-off-by: Sebastian Gumprich <[email protected]> * set correct defaults on to ssl options Signed-off-by: Sebastian Gumprich <[email protected]> * remove left-over hidepid argument spec Signed-off-by: Sebastian Gumprich <[email protected]> * remove license and author infos, this lives in the collection readme Signed-off-by: Sebastian Gumprich <[email protected]> * fix styling Signed-off-by: Sebastian Gumprich <[email protected]> * update some descriptions and sort them in the readme Signed-off-by: Sebastian Gumprich <[email protected]> * some more linting Signed-off-by: Sebastian Gumprich <[email protected]> --------- Signed-off-by: Sebastian Gumprich <[email protected]> Co-authored-by: Sebastian Gumprich <[email protected]>	2023-08-07 14:30:59 +02:00
Sebastian GumprichandSebastian Gumprich	ef5e8801e4	add debian 12 support (#684 ) * add debian 12 support Signed-off-by: Sebastian Gumprich <[email protected]> * temp disable pam-checks Signed-off-by: Sebastian Gumprich <[email protected]> * remove debian12 from vagrant tests as there's no box yet Signed-off-by: Sebastian Gumprich <[email protected]> * use new pam-tester from pip Signed-off-by: Sebastian Gumprich <[email protected]> * use new pam-tester from pip Signed-off-by: Sebastian Gumprich <[email protected]> * add setuptoolks to pam-tester install Signed-off-by: Sebastian Gumprich <[email protected]> * add setuptoolks to pam-tester install Signed-off-by: Sebastian Gumprich <[email protected]> * add setuptoolks to pam-tester install Signed-off-by: Sebastian Gumprich <[email protected]> * add setuptoolks to pam-tester install Signed-off-by: Sebastian Gumprich <[email protected]> * install pam-tester with python3 and use full path to it Signed-off-by: Sebastian Gumprich <[email protected]> * install python3-setupttools in verify-tests Signed-off-by: Sebastian Gumprich <[email protected]> * fix path for pam-tester in all tests Signed-off-by: Sebastian Gumprich <[email protected]> * set python interpreter to 3 for verify-tests Signed-off-by: Sebastian Gumprich <[email protected]> * Revert "set python interpreter to 3 for verify-tests" This reverts commit `00b6556e33`. * add back accidentally deleted tasks Signed-off-by: Sebastian Gumprich <[email protected]> --------- Signed-off-by: Sebastian Gumprich <[email protected]> Co-authored-by: Sebastian Gumprich <[email protected]>	2023-08-04 12:59:40 +02:00
Sebastian Gumprich	790c7c5846	add var-naming[no-role-prefix] to skip-list (#679 ) there's probably some added value for this, but I see no reason to change so many variables and possibly break something when it still works and nobody complained Signed-off-by: Sebastian Gumprich <[email protected]>	2023-06-20 15:18:55 +02:00
Sebastian Gumprich	f56d80b5d8	Replace ssh_keys group in Fedora with root (#677 ) * Replace ssh_keys group in Fedora with root In Fedora 38, the `ssh_keys` group was removed. root is used now, in accordance to upstream. See: https://www.spinics.net/lists/fedora-devel/msg307707.html See: https://src.fedoraproject.org/rpms/openssh/pull-request/37# Signed-off-by: Sebastian Gumprich <[email protected]> * change host key mode and owner in fedora and rhel9 Signed-off-by: Sebastian Gumprich <[email protected]> * add missing host mode for rhel7 Signed-off-by: Sebastian Gumprich <[email protected]> * harden all ssh host keys Signed-off-by: Sebastian Gumprich <[email protected]> * skip linting rule Signed-off-by: Sebastian Gumprich <[email protected]> * correct grp for bsd is wheel Signed-off-by: Sebastian Gumprich <[email protected]> --------- Signed-off-by: Sebastian Gumprich <[email protected]>	2023-06-10 08:04:04 +02:00
Sebastian Gumprich	7e6a715692	setting gets ignored (#680 ) see: https://github.com/authselect/authselect/issues/223 Signed-off-by: Sebastian Gumprich <[email protected]>	2023-05-26 14:10:49 +02:00
Sebastian Gumprich schurzi dev-sec CI	988e5322cd	Fix molecule tests for EL7 (#636 ) * Fix molecule tests for EL7 Signed-off-by: Sebastian Gumprich <[email protected]> * Apply suggestions from code review Co-authored-by: schurzi <[email protected]> * try to fix tests in centos 7 Signed-off-by: Sebastian Gumprich <[email protected]> * try to fix tests in centos 7 Signed-off-by: Sebastian Gumprich <[email protected]> --------- Signed-off-by: Sebastian Gumprich <[email protected]> Co-authored-by: dev-sec CI <[email protected]> Co-authored-by: schurzi <[email protected]>	2023-02-14 11:15:21 +01:00
Sebastian Gumprich	c2e9c9a8dd	try to fix molecule local tests (#632 ) these settings are probably not necessary (geerlingguys images dont have them either) Signed-off-by: Sebastian Gumprich <[email protected]>	2023-02-06 14:01:40 +01:00
rndmh3ro	bc096e58e5	Prettified Code!	2023-01-28 20:59:35 +00:00
Sebastian Gumprich donestefan schurzi	89138be4ec	Rewrite system account detection and hardening and create tests (#621 ) * rewrite system account detection and hardening * resolve failures created when resolving merge conflicts Signed-off-by: Sebastian Gumprich <[email protected]> * add tests for shell removal tasks Signed-off-by: Sebastian Gumprich <[email protected]> * Update molecule/os_hardening/prepare.yml Signed-off-by: Martin Schurz <[email protected]> * split tasks for locking and setting shell Signed-off-by: Martin Schurz <[email protected]> * fix some more linting Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Martin Schurz <[email protected]> Co-authored-by: donestefan <[email protected]> Co-authored-by: schurzi <[email protected]>	2023-01-27 11:01:03 +01:00
Sebastian Gumprich	bb588bd777	linting (#603 ) * linting Signed-off-by: Sebastian Gumprich <[email protected]> * more linting Signed-off-by: Sebastian Gumprich <[email protected]> * change line length issues Signed-off-by: Sebastian Gumprich <[email protected]> * replace yes with true in tasks Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * add exception for task Signed-off-by: Sebastian Gumprich <[email protected]> * remove trailing whitespace * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back tasks Signed-off-by: Sebastian Gumprich <[email protected]>	2023-01-24 12:40:27 +01:00
rndmh3ro	b3fbfcedbe	Prettified Code!	2023-01-19 12:45:51 +00:00
Sebastian Gumprichandschurzi	be0642bcfb	add verify-task to check if mysql is running and enabled (#608 ) * add verify-task to check if mysql is running and enabled Signed-off-by: Sebastian Gumprich <[email protected]> * Update molecule/mysql_hardening/verify_tasks/service.yml Co-authored-by: schurzi <[email protected]> Signed-off-by: Sebastian Gumprich <[email protected]> Co-authored-by: schurzi <[email protected]>	2022-12-07 08:49:07 +01:00
Sebastian GumprichandFlorian Goth	e66c2eb6bb	Add OpenSUSE support (#605 ) * Add variables for mariadb on opensuse Signed-off-by: Florian Goth <[email protected]> * enable pipeline Signed-off-by: Florian Goth <[email protected]> * add a note about the reuirement of the jmespath library. Signed-off-by: Florian Goth <[email protected]> * Use python3 on opensuse Signed-off-by: Florian Goth <[email protected]> * fix my yml. Signed-off-by: Florian Goth <[email protected]> * use right ansible variable Signed-off-by: Florian Goth <[email protected]> * Suse requires python-rpm Signed-off-by: Florian Goth <[email protected]> * try zypper Signed-off-by: Florian Goth <[email protected]> * python-xml Signed-off-by: Florian Goth <[email protected]> * another try at fixing the install Signed-off-by: Florian Goth <[email protected]> * fix my yml Signed-off-by: Florian Goth <[email protected]> * another try Signed-off-by: Florian Goth <[email protected]> * another try Signed-off-by: Florian Goth <[email protected]> * another try now with rpm. Signed-off-by: Florian Goth <[email protected]> * fix my yml... Signed-off-by: Florian Goth <[email protected]> * typo Signed-off-by: Florian Goth <[email protected]> * do the test for Suse on the shell and not in ansible Signed-off-by: Florian Goth <[email protected]> * specify to use bash Signed-off-by: Florian Goth <[email protected]> * specify to use bash * try the removes keyword of builtin.shell Signed-off-by: Florian Goth <[email protected]> * fix ansible syntax Signed-off-by: Florian Goth <[email protected]> * fix zypper syntax Signed-off-by: Florian Goth <[email protected]> * ensure pymysql is present Signed-off-by: Florian Goth <[email protected]> * set ansible python interpreter in converge-step, too Signed-off-by: Sebastian Gumprich <[email protected]> * move install task to prepare Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Florian Goth <[email protected]> Signed-off-by: Sebastian Gumprich <[email protected]> Co-authored-by: Florian Goth <[email protected]>	2022-11-29 15:09:27 +01:00
Sebastian Gumprich	44489dea5f	run tests only on pushes to master or to PRs (#581 ) Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Sebastian Gumprich <[email protected]>	2022-09-28 10:44:31 +02:00
Sebastian Gumprich	9ac01fb358	add always-tag to include so other tags can be used (#569 ) Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Sebastian Gumprich <[email protected]>	2022-08-26 13:45:05 +02:00
Sebastian Gumprich	11d187e62e	update supported OS in meta and fix linting (#572 ) Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Sebastian Gumprich <[email protected]>	2022-08-26 13:44:51 +02:00
Sebastian Gumprich	fbea75ad18	only run release actions on upstream-repo (#568 ) fixes #566 Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Sebastian Gumprich <[email protected]>	2022-08-26 09:40:59 +02:00
Sebastian Gumprich	720d7786b5	fix typo	2022-08-22 12:39:21 +02:00
Sebastian Gumprich	84412e99c2	fix typo	2022-08-22 11:25:08 +02:00
Sebastian Gumprich	82bb46d7cc	update supported OS	2022-08-16 17:21:06 +02:00
Sebastian Gumprich	d11595d81a	revert debian 9 change, only one tls variable now (#562 ) fixes #528 Signed-off-by: Sebastian Gumprich <[email protected]> Signed-off-by: Sebastian Gumprich <[email protected]>	2022-08-15 16:01:49 +02:00
rndmh3ro	e28e09cd0e	Prettified Code!	2022-07-07 07:02:50 +00:00
Sebastian Gumprich	231036f882	update commit-action version	2022-06-29 12:59:44 +02:00
Sebastian Gumprich	36412f438a	upadte commit-action version	2022-06-29 12:56:28 +02:00
Sebastian Gumprich	af14af5954	add waivers to skip controls (#529 ) Signed-off-by: rndmh3ro <[email protected]>	2022-02-21 13:58:39 +01:00
Sebastian Gumprich	2ba40b0891	move sysctls to debian specific vars (#524 ) * fix ansible-lint issue https://github.com/ansible-community/ansible-lint/issues/1795 Signed-off-by: rndmh3ro <[email protected]> * move 2 sysctls to debian specific Signed-off-by: rndmh3ro <[email protected]> * fix ansible-lint issue https://github.com/ansible-community/ansible-lint/issues/1795 Signed-off-by: rndmh3ro <[email protected]> * add arch linux sysctls * simplify sysctl settings Signed-off-by: rndmh3ro <[email protected]> * ove overwrite to the bottom to let it acutally overwrite something Signed-off-by: rndmh3ro <[email protected]> * fix typo Signed-off-by: rndmh3ro <[email protected]>	2022-02-18 15:30:32 +01:00
Sebastian Gumprich	8f22ce788c	Feature coredump (#513 ) * restructure limits-tasks * disable coredumps in tests * use notify-task for systemd-reload Signed-off-by: rndmh3ro <[email protected]> * add notify to another task Signed-off-by: rndmh3ro <[email protected]> * rm obsolete task and rename handler Signed-off-by: rndmh3ro <[email protected]>	2021-12-10 22:10:14 +01:00
Sebastian Gumprich	f09b2b6338	fix molecule call	2021-10-25 10:26:56 +02:00
Sebastian Gumprichandschurzi	9f372c285c	Update roles/os_hardening/defaults/main.yml Co-authored-by: schurzi <[email protected]>	2021-10-24 10:59:49 +02:00
Sebastian Gumprich	be0d501bc8	update minimum ansible version for roles fixes #407 Signed-off-by: rndmh3ro <[email protected]>	2021-10-20 20:42:05 +02:00
rndmh3ro	8ff3d73bbf	Prettified Code!	2021-08-25 10:58:16 +00:00
Sebastian Gumprich	545fd8798f	Create LICENSE	2021-08-06 13:08:55 +02:00
Sebastian Gumprich	681047ba52	fix readme in galaxy	2021-07-23 11:06:22 +02:00
Sebastian Gumprich	da50f20860	update metadata to include community.mysql deps	2021-07-13 14:08:27 +02:00
Sebastian Gumprich	4ca4f09453	Cleanup old OS-support and simplify vars (#458 ) * use os_family instead of distribution for debian systems Signed-off-by: rndmh3ro <[email protected]> * remove tasks related to rhel6 or debian 6 Signed-off-by: rndmh3ro <[email protected]>	2021-06-30 13:09:46 +02:00
Sebastian Gumprich	72ec118a6d	add rocky linux 8 tests and make sure that all relevant tasks are execd (#457 ) * add rocky linux 8 tests and make sure that all relevant tasks are executed Signed-off-by: rndmh3ro <[email protected]> * fix missing quote Signed-off-by: rndmh3ro <[email protected]>	2021-06-30 13:09:12 +02:00
Sebastian Gumprichandschurzi	9cefddd949	make sha rounds configurable and increase no of rounds (#452 ) * make sha rounds configurable and increase no of rounds Fixes #365 Signed-off-by: rndmh3ro <[email protected]> * Prettified Code! * make password rounds configurable in pam system-auth Signed-off-by: rndmh3ro <[email protected]> * change wording of sha rounds documentation Co-authored-by: schurzi <[email protected]> Co-authored-by: schurzi <[email protected]>	2021-06-30 10:41:59 +02:00
Sebastian Gumprich	41cd8485cb	enable ipv6 globally (#450 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2021-05-26 20:13:45 +02:00
rndmh3ro	07a0943c5a	Prettified Code!	2021-04-30 12:50:12 +00:00
rndmh3ro	369c2986c6	Prettified Code!	2021-03-22 10:23:03 +00:00
Sebastian Gumprichandschurzi	bf82736787	Update roles/os_hardening/tasks/user_accounts.yml Co-authored-by: schurzi <[email protected]>	2021-03-22 11:18:51 +01:00
Sebastian Gumprich	f9bbdb20fe	add install instructions	2021-02-25 07:57:55 +01:00
Sebastian Gumprich	bbf992d9fc	Create dependabot.yml	2021-02-22 10:22:38 +01:00
Sebastian Gumprich	6be31fbc3b	do not install mysql python package on target host (#401 ) this package has to be installed on the host that executes the task Signed-off-by: Sebastian Gumprich <[email protected]>	2021-02-10 15:57:51 +01:00
Sebastian Gumprich	756839f8f0	make wrong password fail task (#400 ) * make wrong password fail task Signed-off-by: Sebastian Gumprich <[email protected]> * add name to fail task Signed-off-by: Sebastian Gumprich <[email protected]>	2021-02-10 15:55:08 +01:00
Sebastian Gumprich	c55c1f21ed	add restart handler variable for mysql role (#399 ) * add restart handler variable for mysql role Signed-off-by: Sebastian Gumprich <[email protected]> * add prettierignore file to ignore CHANGELOG Signed-off-by: Sebastian Gumprich <[email protected]>	2021-02-10 15:54:57 +01:00
rndmh3ro	0cfdb1954e	Prettified Code!	2021-02-09 08:45:31 +00:00
Sebastian Gumprich	faffddbf31	add a runtime.yml to declare minimum ansible version (#363 ) * add a runtime.yml to declare minimum ansible version Signed-off-by: Sebastian Gumprich <[email protected]> * add minimum ansible version to reamde Signed-off-by: Sebastian Gumprich <[email protected]> * Prettified Code!	2020-12-26 21:27:19 +01:00
Sebastian Gumprich	5341f2a891	Update release.yml	2020-12-15 11:35:54 +01:00
Sebastian Gumprich	753e517678	fix second changelog generation task, too (#349 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2020-12-15 10:10:10 +01:00
Sebastian Gumprich	253c5ec3eb	fix changelog generation (#341 ) * fix changelog generation the changelog generation fails because we merged other repos into this one and these commits do not share a common ancestor. see this issue: https://github.com/github-changelog-generator/github-changelog-generator/issues/665 to workaround this, we change the changelog generation so all tags older than 7.0.0 will be ignored (--since-tag does not work here because it still works on all tags). This however will remove older releases from the changelog so we move these old releases into a separate file. this is okay for me since these old releases are for ansible-os-hardening and not the collection. the new changelog file will contain all changes since 7.0.0. Signed-off-by: Sebastian Gumprich <[email protected]> * fix regex in action Signed-off-by: Sebastian Gumprich <[email protected]>	2020-12-15 09:58:19 +01:00
Sebastian Gumprich	837f99bdf8	update release action	2020-12-13 20:19:03 +01:00
Sebastian Gumprich	cade17ec30	fix typo	2020-11-11 21:54:31 +01:00
rndmh3ro	1cf8a6380d	Prettified Code!	2020-11-11 20:34:34 +00:00
Sebastian Gumprich	2f19ad1ce2	fix typo in galaxy (#332 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2020-11-11 21:26:46 +01:00
Sebastian Gumprich	90151c3047	update galaxy version	2020-11-11 21:10:21 +01:00
rndmh3ro	c94d973527	Prettified Code!	2020-11-08 10:20:25 +00:00
Sebastian Gumprich	81f1d3df6c	Merge pull request #58 from szEvEz/master Run ansible-lint via github action	2020-10-18 14:52:28 +02:00
Sebastian Gumprich	35695d979e	Merge pull request #57 from szEvEz/master Fix kitchen and travisci for major distros	2020-10-17 14:05:34 +02:00
Sebastian Gumprich	daa49d0f47	Merge pull request #55 from dev-sec/fix_vars fix missing variables	2020-10-13 05:23:20 +02:00
Sebastian Gumprich	3cf833f033	Merge pull request #56 from szEvEz/master Use mysql_query module instead of temporary files	2020-10-11 17:53:13 +02:00
Sebastian Gumprich	be67e73a7e	this brings the task in line with the baseline (#311 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2020-10-05 10:50:07 +02:00
Sebastian Gumprich	e54061bcd5	Merge pull request #53 from dev-sec/update_docs update readme to new layout for vars	2020-10-03 08:23:59 +02:00
Sebastian Gumprich	1e115d9eeb	update readme to new layout for vars (#33 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2020-10-03 08:18:22 +02:00
Sebastian Gumprich	e6f5d0bb69	update readme to new layout for vars (#326 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2020-10-03 08:17:48 +02:00
Sebastian Gumprich	2f9febef4e	Merge pull request #51 from dev-sec/modesagain add mode to copy task	2020-09-21 07:34:27 +02:00
Sebastian Gumprich	ab0e5783b9	use touch with no date changes (#310 ) Signed-off-by: Sebastian Gumprich <[email protected]>	2020-09-20 14:27:09 +02:00
Sebastian Gumprich	bfc80e8cfd	Merge pull request #50 from dev-sec/modes add modes to template and file tasks	2020-09-19 15:04:15 +02:00
Sebastian Gumprich	5c91da696a	do not touch sysctl file to avoid idempotency problems (#309 )	2020-09-19 14:36:57 +02:00
Sebastian Gumprich	fa2cf790f8	Merge pull request #320 from dev-sec/pam add separate option for controlling motd via pam	2020-08-09 17:02:02 +02:00
Sebastian Gumprich	04d19fd195	fix typo	2020-08-03 21:28:23 +02:00
Sebastian Gumprich	f1a65f5f44	Merge pull request #318 from dev-sec/fix_kitchen fix local kitchen tests	2020-07-28 09:24:22 +02:00
Sebastian Gumprich	f50f22ca66	Merge pull request #294 from aqw/master add SmartOS support	2020-07-28 08:30:17 +02:00
Sebastian Gumprich	65a8fa0c6c	move hidepid vars into defaults so theyre overwritable (#285 ) fixes #284 Signed-off-by: Sebastian Gumprich <[email protected]>	2020-07-22 21:27:25 +02:00
Sebastian Gumprich	3b75e49c0e	fix typo	2020-07-20 11:52:22 +02:00
Sebastian Gumprich	8806f9f06a	fix typo	2020-07-18 10:27:21 +02:00
Sebastian Gumprich	b4b306484b	Merge pull request #307 from nununo/master README: New section on server port and idempotency	2020-07-13 18:52:38 +02:00
Sebastian Gumprich	cb407267c0	remove mention of gitter	2020-07-12 09:16:53 +02:00
Sebastian Gumprich	4494ddd132	remove mention of gitter	2020-07-12 09:16:33 +02:00
Sebastian Gumprich	990f95807f	remove mention of gitter	2020-07-12 09:16:22 +02:00
Sebastian Gumprich	8e7ce74953	remove mention of gitter	2020-07-12 09:16:04 +02:00
Sebastian Gumprich	147a26c27a	Merge pull request #305 from dev-sec/order_crypto add blocks to crypto.yml checks	2020-07-09 13:52:21 +02:00
Sebastian Gumprich	fda42b7022	Merge branch 'master' into order_crypto	2020-07-09 13:40:39 +02:00
Sebastian Gumprich	4c248a4901	remove obsolete include_task	2020-07-09 13:33:19 +02:00
Sebastian Gumprich	41aef7eb80	Merge pull request #304 from dev-sec/fix_typo fix typo in hardening.yml	2020-07-09 08:20:03 +02:00
Sebastian Gumprich	22580d853f	Merge pull request #301 from dev-sec/fix_fedora_tests fix package install in tests	2020-07-06 09:44:10 +02:00