ansible-collection-hardening

0 Fork 0

Author	SHA1	Message	Date
ChristophandChristoph Sieber	940ed980b3	disable systemd audit logging (#902 ) * os_hardening: disable systemd audit logging disable audit logging via systemd-journald when enabling auditd as this leads to duplicate logs in the journal or even /var/log/messages depending on the configuration Signed-off-by: Christoph Sieber <[email protected]> * Don't disable systemd-journald-audit.socket on Suse it seems the socket doesn't exist on this OS Signed-off-by: Christoph Sieber <[email protected]> --------- Signed-off-by: Christoph Sieber <[email protected]> Co-authored-by: Christoph Sieber <[email protected]>	2025-10-27 22:23:39 +01:00
Martin Schurz	54f9ef42a1	don't try to restart audit in check mode Signed-off-by: Martin Schurz <[email protected]>	2023-11-22 00:45:38 +01:00
Martin Schurz	25acb76c05	reload systemd after installation Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 23:59:22 +01:00
Martin Schurz	20dd04c9cb	split notify, add tmp options for arch Signed-off-by: Martin Schurz <[email protected]>	2023-11-21 21:58:58 +01:00
Dennis Lerch	6bcdb253ec	auditd: add possibility to override config template (#685 ) * make template overrideable by referencing the auditd.conf.j2 template, a custom template can be provided to the role. Signed-off-by: Dennis Lerch <[email protected]> * extend auditd config make freq and log_file configurable implement write_logs with it's default value in order to be able to disable log writing Signed-off-by: Dennis Lerch <[email protected]> * Extend README.md documentation by new variables reorder `os_auditd_log_format` to keep sequence from defaults Signed-off-by: Dennis Lerch <[email protected]> --------- Signed-off-by: Dennis Lerch <[email protected]>	2023-07-24 11:34:47 +02:00
Sebastian Gumprich	bb588bd777	linting (#603 ) * linting Signed-off-by: Sebastian Gumprich <[email protected]> * more linting Signed-off-by: Sebastian Gumprich <[email protected]> * change line length issues Signed-off-by: Sebastian Gumprich <[email protected]> * replace yes with true in tasks Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * add exception for task Signed-off-by: Sebastian Gumprich <[email protected]> * remove trailing whitespace * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back tasks Signed-off-by: Sebastian Gumprich <[email protected]>	2023-01-24 12:40:27 +01:00
schurzi	a1b80fe657	adopt all current suggestions from ansible-lint (#592 )	2022-10-24 09:42:23 +02:00
schurzi	2882a15ee1	Merge pull request #427 from dev-sec/snoopotic-fix/add_auditd_restart_handler add restart-auditd handler after configuration change	2021-03-29 21:15:46 +02:00
Farid Joubbi	7af432e1cf	Uppercased first letter of task names. (#422 ) Signed-off-by: Farid Joubbi <[email protected]>	2021-03-25 13:52:56 +01:00
Felix Herzog	eca93cc80b	add restart-auditd handler as after configuration change (e.g. of os_auditd_max_log_file_action) you need to restart. Sadly on rhel7 systems you cannot use systemd. And as debian derivates use service as alias and it works I kept it that simple. also adding 'auditd'-tag to make it easy only run that config change if needed. Signed-off-by: Felix Herzog <[email protected]>	2021-03-19 14:42:31 +01:00
Sebastian Gumprich	dd3959276b	merge os-hardening role into collection	2020-11-07 22:09:28 +01:00