renovate[bot]
28f9ef09ed
chore(deps): update actions/checkout digest to 11bd719
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-16 20:50:58 +00:00
dev-sec CI
674c7b4551
update changelog
2024-11-16 15:16:13 +00:00
renovate[bot]
3db0a70ccf
chore(deps): update dependency aar-doc to v2.0.1 ( #817 )
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-16 15:14:57 +00:00
dev-sec CI
fd5a8f39dd
update changelog
2024-11-16 10:11:23 +00:00
schurzi
f8e199b315
Merge pull request #825 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to 44be233
2024-11-16 11:10:38 +01:00
Martin Schurz
577c87d07b
Add space ...
2024-11-16 11:10:10 +01:00
Martin Schurz
9096046161
Disable OpenBSD Tests
2024-11-16 01:13:50 +01:00
dev-sec CI
fe6a957a90
update changelog
2024-11-16 00:11:46 +00:00
schurzi
47ff6e41ac
Merge pull request #814 from dev-sec/renovate/actions-setup-python-digest
...
Update actions/setup-python digest to 0b93645
2024-11-16 01:10:29 +01:00
renovate[bot]
069966702d
Update ansible/ansible-lint digest to 44be233
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-13 15:12:00 +00:00
dev-sec CI
ad79abb889
update changelog
2024-11-11 18:53:54 +00:00
dev-sec CI
82a84eec94
update ssh_hardening readme
2024-11-11 18:53:09 +00:00
Shizzlebix
cb85a99e22
adding switch for ForwardAgent in ssh_config ( #818 )
...
* Update openssh.conf.j2
add switch for FowardAgent
* Update openssh.conf.j2
fix typo
* Update openssh.conf.j2
change ssh_ForwardAgent to ssh_forward_agent
* Update argument_specs.yml
adding context for ssh_forward_agent
2024-11-11 19:52:38 +01:00
dev-sec CI
96d318eaf4
update changelog
2024-11-06 19:20:39 +00:00
dependabot[bot]
5b28117d72
Bump ansible-core from 2.17.5 to 2.17.6 ( #820 )
...
Bumps [ansible-core](https://github.com/ansible/ansible ) from 2.17.5 to 2.17.6.
- [Release notes](https://github.com/ansible/ansible/releases )
- [Commits](https://github.com/ansible/ansible/compare/v2.17.5...v2.17.6 )
---
updated-dependencies:
- dependency-name: ansible-core
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2024-11-06 20:08:54 +01:00
renovate[bot]
f2af5f0b52
chore(deps): update actions/setup-python digest to 0b93645
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-24 16:43:41 +00:00
dev-sec CI
8d9569cd71
update galaxy.yml with new version
2024-10-22 08:25:58 +00:00
dev-sec CI
259aa71946
update changelog
2024-10-22 08:24:08 +00:00
dev-sec CI
5015cda4f0
update nginx_hardening readme
2024-10-22 07:18:55 +00:00
dev-sec CI
532b7a70ea
update ssh_hardening readme
2024-10-22 07:18:52 +00:00
dev-sec CI
8d336bcdfa
update os_hardening readme
2024-10-22 07:18:45 +00:00
dev-sec CI
8fffcde096
update mysql_hardening readme
2024-10-22 07:18:42 +00:00
dev-sec CI
37785016d9
update changelog
2024-10-22 06:54:58 +00:00
schurzi
5d95dc7083
Merge pull request #810 from dev-sec/audit_name
...
Add variable to set name_format for auditd
2024-10-22 08:47:36 +02:00
Martin Schurz
f70a74f99f
Add variable to set name_format for auditd
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-22 08:46:23 +02:00
schurzi
b6d11a0b19
Merge pull request #811 from dev-sec/py_version
...
Pin python dependencies and optimize GitHub Actions
2024-10-22 08:45:40 +02:00
Martin Schurz
92995bbee3
Sort matrix builds
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-22 08:44:39 +02:00
Martin Schurz
752a541507
Fix copy&paste error
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-21 20:06:14 +02:00
Martin Schurz
45193e9ff1
Pin python dependencies and optimize GitHub Actions
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-21 20:01:14 +02:00
dev-sec CI
7dab72c8c1
update changelog
2024-10-13 19:43:46 +00:00
rndmh3ro
8619b26b75
Prettified Code!
2024-10-13 19:42:40 +00:00
Sebastian Gumprich
7b112dcf87
feat(ssh): add alpine support ( #809 )
...
Signed-off-by: Sebastian Gumprich <[email protected]
2024-10-13 21:42:28 +02:00
dev-sec CI
cd9cf8f22a
update changelog
2024-10-13 18:27:14 +00:00
dev-sec CI
08dfeedbc0
update os_hardening readme
2024-10-13 18:15:50 +00:00
dev-sec CI
759b746429
update ssh_hardening readme
2024-10-13 18:15:43 +00:00
dev-sec CI
e6ea4f0b4c
update mysql_hardening readme
2024-10-13 18:15:40 +00:00
dev-sec CI
94f05a971a
update changelog
2024-10-13 18:14:26 +00:00
Sebastian Gumprich
aa737011e4
fix(cicd): test idempotence on ssh custom tests ( #807 )
...
Signed-off-by: Sebastian Gumprich <[email protected]
2024-10-13 20:12:21 +02:00
dev-sec CI
19ac284200
update nginx_hardening readme
2024-10-13 18:12:08 +00:00
Sebastian Gumprich
141efbc516
fix(ssh_hardening): test setting kex to false, remove wrong default ( #808 )
...
Signed-off-by: Sebastian Gumprich <[email protected]
2024-10-13 20:11:47 +02:00
dev-sec CI
7cca65bc90
update changelog
2024-10-13 10:37:24 +00:00
rndmh3ro
cfd4536868
Prettified Code!
2024-10-13 10:35:08 +00:00
seven-beep
a97a54dc30
Provide granular noop for ssh configuration ( #789 )
...
* Provide granular noop for shh configuration
We would like to have more fine grained options on applying or not specific configurations.
This commit let the user choose to noop some configuration with a few new
boolean variables.
Motivation for theses options are we may configure ourselves some (ssh host key
regeneration in a templating system) or we are not ready for others (ssh_kex
will break dist-upgrades, letting the operator without ssh).
Signed-off-by: seven beep <[email protected] [email protected] [email protected]
2024-10-13 12:34:52 +02:00
dev-sec CI
a1c7e77f08
update changelog
2024-10-10 11:41:18 +00:00
dev-sec CI
be5a98bce5
update mysql_hardening readme
2024-10-10 11:39:07 +00:00
dev-sec CI
1464ee7693
update nginx_hardening readme
2024-10-10 11:39:01 +00:00
dev-sec CI
ba1991b4c1
update os_hardening readme
2024-10-10 11:39:00 +00:00
dev-sec CI
a234d23d77
update ssh_hardening readme
2024-10-10 11:38:59 +00:00
schurzi
3923ea888b
Merge pull request #806 from vmpr/patch-2
...
Document correct quotes for ssh_permit_tunnel parameter
2024-10-10 13:38:39 +02:00
vmpr
27aa081889
fixing missing quotes for ssh_permit_tunnel parameter in argument_specs.yml
...
ssh_permit_tunnel needs quotes otherwise we will end up with an error:
```
TASK [devsec.hardening.ssh_hardening : Create sshd_config and set permissions to root/600] **********************************************************************************************************************
fatal: [vampdock02]: FAILED! => {"changed": false, "checksum": "fe6b74e30b1a653f83c2cbe1dd1332c14bd55833", "exit_status": 255, "msg": "failed to validate", "stderr": "/home/debian/.ansible/tmp/ansible-tmp-1728530891.493071-72386-149151737175948/source line 123: bad PermitTunnel argument True\r\n", "stderr_lines": ["/home/debian/.ansible/tmp/ansible-tmp-1728530891.493071-72386-149151737175948/source line 123: bad PermitTunnel argument True"], "stdout": "", "stdout_lines": []}
```
2024-10-10 15:50:17 +08:00
renovate[bot]