andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,014 Commits 14 Branches 64 Tags
8effc06c91dc710411248d71442a909dfa8e5671
Commit Graph
2014 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastian Gumprich 8effc06c91 enable debian12 for vm tests 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-09-22 08:52:27 +02:00
Sebastian Gumprich a81b9bc0e6 add back accidentally deleted tasks 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-04 12:42:14 +02:00
Sebastian Gumprich a1c44a1459 Revert "set python interpreter to 3 for verify-tests" 
This reverts commit 00b6556e33.
 2023-08-04 12:41:40 +02:00
Sebastian Gumprich 00b6556e33 set python interpreter to 3 for verify-tests 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-04 11:40:48 +02:00
Sebastian Gumprich c87fe430c7 fix path for pam-tester in all tests 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-04 10:59:32 +02:00
Sebastian Gumprich 35d3e6aa9d install python3-setupttools in verify-tests 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-04 10:59:19 +02:00
Sebastian Gumprich 5fbed64dd4 install pam-tester with python3 and use full path to it 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-04 09:59:41 +02:00
Sebastian Gumprich c678514bb6 add setuptoolks to pam-tester install 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-01 13:55:02 +02:00
Sebastian Gumprich c9d6d981a3 add setuptoolks to pam-tester install 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-01 13:39:06 +02:00
Sebastian Gumprich a2aae0f49b add setuptoolks to pam-tester install 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-01 13:13:16 +02:00
Sebastian Gumprich 6ca2f11433 add setuptoolks to pam-tester install 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-01 12:49:53 +02:00
Sebastian Gumprich f901b684ba use new pam-tester from pip 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-01 09:29:17 +02:00
Sebastian Gumprich 186b36d954 use new pam-tester from pip 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-08-01 09:00:13 +02:00
Sebastian Gumprich 49e8d4fdda remove debian12 from vagrant tests as there's no box yet 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-06-21 14:36:11 +02:00
Sebastian Gumprich 7f8b34e0fb temp disable pam-checks 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-06-21 13:40:11 +02:00
Sebastian Gumprich 6d8f4dfbfb add debian 12 support 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-06-20 15:30:22 +02:00
dev-sec CI fc524f5369 update changelog 2023-06-20 13:22:05 +00:00
Sebastian Gumprich 790c7c5846 add var-naming[no-role-prefix] to skip-list (#679) 
there's probably some added value for this, but I see no reason to change so many variables and possibly break something when it still works and nobody complained

Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-06-20 15:18:55 +02:00
dev-sec CI 45d6a17c08 update changelog 2023-06-12 12:22:09 +00:00
Nejc Habjan dd215ba310 feat: explicitly support Fedora 37 and 38 (#682) 
Signed-off-by: Nejc Habjan <[email protected]>
 2023-06-12 14:18:32 +02:00
dev-sec CI 1fb9988fd7 update changelog 2023-06-10 06:07:05 +00:00
Sebastian Gumprich f56d80b5d8 Replace ssh_keys group in Fedora with root (#677) 
* Replace ssh_keys group in Fedora with root

In Fedora 38, the `ssh_keys` group was removed. root is used now, in accordance to upstream.

See: https://www.spinics.net/lists/fedora-devel/msg307707.html
See: https://src.fedoraproject.org/rpms/openssh/pull-request/37#

Signed-off-by: Sebastian Gumprich <[email protected]>

* change host key mode and owner in fedora and rhel9

Signed-off-by: Sebastian Gumprich <[email protected]>

* add missing host mode for rhel7

Signed-off-by: Sebastian Gumprich <[email protected]>

* harden all ssh host keys

Signed-off-by: Sebastian Gumprich <[email protected]>

* skip linting rule

Signed-off-by: Sebastian Gumprich <[email protected]>

* correct grp for bsd is wheel

Signed-off-by: Sebastian Gumprich <[email protected]>

---------

Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-06-10 08:04:04 +02:00
dev-sec CI 0e173b4165 update changelog 2023-05-26 12:13:00 +00:00
Sebastian Gumprich 7e6a715692 setting gets ignored (#680) 
see: https://github.com/authselect/authselect/issues/223

Signed-off-by: Sebastian Gumprich <[email protected]>
 2023-05-26 14:10:49 +02:00
dev-sec CI 9c86dae383 update changelog 2023-05-23 09:22:51 +00:00
junicastandJochen Demmer f3337f33b3 Add oddjob mkhomedir option rhel pam (#675) 
* added support for oddjob mkhomedir via optional var

* optimized conditional

* added variable description

Signed-off-by: Jochen Demmer <[email protected]>

* added support for oddjob mkhomedir via optional var

Signed-off-by: Jochen Demmer <[email protected]>

* optimized conditional

Signed-off-by: Jochen Demmer <[email protected]>

* added variable description

Signed-off-by: Jochen Demmer <[email protected]>

---------

Signed-off-by: Jochen Demmer <[email protected]>
Co-authored-by: Jochen Demmer <[email protected]>
 2023-05-23 11:19:40 +02:00
dev-sec CI c597eb97b2 update changelog 2023-05-22 13:56:42 +00:00
Andreas Wagnerandwhysthatso d7bda7ca3a expand on check conditions for non-file locations of logs (#674) 
Co-authored-by: whysthatso <[email protected]>
 2023-05-22 15:53:33 +02:00
dev-sec CI 037919e67a update changelog 2023-04-28 12:08:48 +00:00
schurzi ed5aefad3e Merge pull request #667 from dev-sec/molecule_update 
use new molecule-plugins
 2023-04-28 14:05:46 +02:00
Martin Schurz e5b8df07e2 use new molecule-plugins 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-28 13:48:45 +02:00
dev-sec CI 808cc6d78a update changelog 2023-04-17 07:51:08 +00:00
schurzi 1cce7bca9a Merge pull request #662 from dev-sec/codespell 
add spellchecking with codespell
 2023-04-17 09:47:53 +02:00
Martin Schurz 74c76b8240 correct workflow name and use main version 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-16 22:57:44 +02:00
Martin Schurz cd56c017ba add parameter for skipped words 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-16 22:54:43 +02:00
Martin Schurz 93ddd4b45e use shared workflow 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-16 22:49:53 +02:00
Martin Schurz 7259d6b5fd fix spelling errors 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-14 23:51:53 +02:00
Martin Schurz edcada16e4 add spellchecking with codespell 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-14 23:34:05 +02:00
dev-sec CI 7e31002555 update galaxy.yml with new version 2023-04-13 08:40:54 +00:00
dev-sec CI 8816969278 update changelog 2023-04-12 22:51:41 +00:00
schurzi 7e6e43e0a5 Merge pull request #657 from dev-sec/min_ansible_ver 8.7.0 2023-04-13 00:48:29 +02:00
dev-sec CI b79eb83d4f update changelog 2023-04-12 20:24:10 +00:00
Martin Schurz eb47f4dce0 Merge branch 'master' into min_ansible_ver 2023-04-12 22:22:36 +02:00
schurzi 4a21ec0234 Merge pull request #656 from dev-sec/update_Tests 
Update test environment
 2023-04-12 22:21:49 +02:00
Martin Schurz bb47300798 remove unneccessary collection include 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-12 20:27:35 +02:00
Martin Schurz de0439ed58 remove unneccessary collection include 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-12 20:22:22 +02:00
Martin Schurz 6e48f686a9 add fedora to testing 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-12 20:21:27 +02:00
Martin Schurz 0014a3be36 update metadata 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-12 20:18:29 +02:00
Martin Schurz a186760b45 exclude broken tests 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-11 09:51:05 +02:00
Martin Schurz a5a065f880 shorten text 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-11 07:49:38 +02:00