andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
634 Commits 14 Branches 64 Tags
a46642ee92786354da801383c9bfb652f41e47af
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastian Gumprich e6f5d0bb69 update readme to new layout for vars (#326) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-10-03 08:17:48 +02:00
Sebastian Gumprich fa2cf790f8 Merge pull request #320 from dev-sec/pam 
add separate option for controlling motd via pam
 2020-08-09 17:02:02 +02:00
Sebastian Gumprich 04d19fd195 fix typo 2020-08-03 21:28:23 +02:00
Sebastian Gumprich f1a65f5f44 Merge pull request #318 from dev-sec/fix_kitchen 
fix local kitchen tests
 2020-07-28 09:24:22 +02:00
Sebastian Gumprich f50f22ca66 Merge pull request #294 from aqw/master 
add SmartOS support
 2020-07-28 08:30:17 +02:00
Sebastian Gumprich 3b75e49c0e fix typo 2020-07-20 11:52:22 +02:00
Sebastian Gumprich 8806f9f06a fix typo 2020-07-18 10:27:21 +02:00
Sebastian Gumprich b4b306484b Merge pull request #307 from nununo/master 
README: New section on server port and idempotency
 2020-07-13 18:52:38 +02:00
Sebastian Gumprich 8e7ce74953 remove mention of gitter 2020-07-12 09:16:04 +02:00
Sebastian Gumprich 147a26c27a Merge pull request #305 from dev-sec/order_crypto 
add blocks to crypto.yml checks
 2020-07-09 13:52:21 +02:00
Sebastian Gumprich fda42b7022 Merge branch 'master' into order_crypto 2020-07-09 13:40:39 +02:00
Sebastian Gumprich 4c248a4901 remove obsolete include_task 2020-07-09 13:33:19 +02:00
Sebastian Gumprich 41aef7eb80 Merge pull request #304 from dev-sec/fix_typo 
fix typo in hardening.yml
 2020-07-09 08:20:03 +02:00
Sebastian Gumprich 22580d853f Merge pull request #301 from dev-sec/fix_fedora_tests 
fix package install in tests
 2020-07-06 09:44:10 +02:00
Sebastian Gumprich 5b96f66835 Merge pull request #300 from divialth/feature/customize_sshd_x11forward 
allow customization of X11Forwarding
 2020-07-06 08:36:07 +02:00
Sebastian Gumprich d06c87386f Merge pull request #298 from dev-sec/rndmh3ro-patch-2 
add centos 8 to meta
 2020-06-25 13:44:17 +02:00
Sebastian Gumprich 573f2483f5 add centos 8 to meta 2020-06-25 13:43:43 +02:00
Sebastian Gumprich 3f962b540f Merge pull request #290 from aisbergg/harmonize-style 
Harmonize style
 2020-06-20 09:07:04 +02:00
Sebastian Gumprich ce41b9f89a Merge branch 'master' into harmonize-style 2020-06-20 08:56:47 +02:00
Sebastian Gumprich b27c679a51 Merge pull request #291 from djesionek/master 
Add archlinux support
 2020-06-18 20:55:56 +02:00
Sebastian Gumprich 1e9df18b64 Merge pull request #289 from dev-sec/unify_actions 
unify changelog and release actions
 2020-06-06 10:25:53 +02:00
Sebastian Gumprich 3480143584 Merge pull request #288 from jeanmonet/patch-1 
`ssh_allow_tcp_forwarding`: use quotes for values
 2020-06-04 06:48:03 +02:00
Sebastian Gumprich 21bec11b09 Merge pull request #287 from dev-sec/chris-rock/customize-ssh-params 
allow customization of login gracetime and max sessins
 2020-06-02 08:57:30 +02:00
Sebastian Gumprich 2c0fb49dee Merge pull request #284 from aqw/master 
make ssh client-side compression configurable
 2020-05-18 10:33:45 +02:00
Sebastian Gumprich 5f741a6f9a Update release.yml 2020-05-09 20:26:19 +02:00
Sebastian Gumprich 9e04f7bc1e Update release.yml 2020-05-09 20:21:38 +02:00
Sebastian Gumprich 0995761706 Merge pull request #282 from dev-sec/workflows 
add changelog and release workflow
 2020-05-09 19:50:59 +02:00
Sebastian Gumprich 46204a99ab Update main.yml 2020-05-09 14:02:18 +02:00
Sebastian Gumprich f4cdcc0251 Merge pull request #281 from kostasns/fix_fedora_build 
fix: Ansible part of Fedora build
 2020-05-09 14:00:31 +02:00
Sebastian Gumprich 12f5a8c56a Merge pull request #280 from dev-sec/rndmh3ro-patch-1 
Add changelog action
 2020-05-08 19:40:28 +02:00
Sebastian Gumprich fc209f5838 Update main.yml 2020-05-08 19:39:44 +02:00
Sebastian Gumprich 6b1233b3cd Create main.yml 2020-05-08 19:36:40 +02:00
Sebastian Gumprich 9255b22c32 Merge pull request #278 from kostasns/issue_243 
feat: Allow to set custom list of HostKeyAlgorithms
 2020-05-08 19:27:28 +02:00
Sebastian Gumprich e1688e4766 Merge pull request #279 from kostasns/fix_amazon_build 
fix: Amazon linux build
 2020-05-08 19:24:04 +02:00
Sebastian Gumprich 07d39172b6 Merge pull request #277 from kostasns/ansible_facts 
fix(ansible_facts): replace few remaining facts from 'ansible_' to using 'ansible_facts' dictionary
 2020-05-08 19:23:15 +02:00
Sebastian Gumprich 63ddfd8948 Merge pull request #274 from paulfantom/patch-1 
vars: remove empty main.yml file
 2020-04-21 09:50:19 +02:00
Sebastian Gumprich 3de3975a91 Merge pull request #273 from ancoron/feature/ubuntu-dynamic-motd-banner 
Disable also dynamic MOTD via PAM if enabled - refs #271
 2020-04-18 15:32:14 +02:00
Sebastian Gumprich 4a97d4dc29 Merge pull request #270 from foonix/rhel6-sha2-hmacs 
Use sha2 HMACs on RHEL 6 / CentOS 6.
 2020-04-13 16:26:36 +02:00
Sebastian Gumprich 78fc2befff Merge pull request #269 from dennisse/master 
Removing 2fa
 2020-03-27 20:00:38 +01:00
Sebastian Gumprich 31c4895547 Merge pull request #267 from jbronn/moduli-when-hardening 
Only manage moduli when hardening server
 2020-03-10 16:42:29 +01:00
Sebastian Gumprich be3317da94 add ansible-lint 2020-02-18 17:52:21 +01:00
Sebastian Gumprich ed3748ff59 Merge pull request #266 from kljensen/remove-bash-dep 
Do not use bash to get ssh version
 2020-02-13 22:24:45 +01:00
Sebastian Gumprich 767540b5a0 Merge pull request #263 from abtreece/remove-comment-from-sshd-hostkey-param 
Remove comment from sshd config HostKey param
 2020-01-24 20:06:14 +01:00
Sebastian Gumprich 4ee9bf2224 Merge pull request #254 from lunarthegrey/patch-1 
Support KEX for OpenSSH 8.0+ & quantum resistant KEX
 2020-01-17 19:26:23 +01:00
Sebastian Gumprich d1824a8417 Merge pull request #257 from brnck/tcp_options 
Add 'all', 'local', 'yes', 'no' options support for AllowTcpForwarding variable
 2019-12-01 14:05:52 +01:00
Sebastian Gumprich 21e442c65c Merge pull request #252 from Slamdunk/patch-1 
SFTP: set default umask to 0027
 2019-10-18 11:32:49 +02:00
Sebastian Gumprich 9286eedc47 Merge pull request #251 from szEvEz/separate-vars 
Separate PermitUserEnviroment from AcceptEnv
 2019-10-15 19:32:03 +02:00
Sebastian Gumprich bb4feda34e Update opensshd.conf.j2 2019-10-15 18:21:00 +02:00
Sebastian Gumprich a5a188698b Merge pull request #245 from szEvEz/refactor-authentication-methods 
refactor authenticationmethod settings, allow user to set authenticat…
 2019-10-13 20:24:35 +02:00
Sebastian Gumprich b6f947c7a2 Merge pull request #242 from Furragen/master 
RHEL/OL/CentOS 8 support
 2019-10-12 22:04:12 +02:00
Sebastian Gumprich 0bb55985e7 Merge pull request #249 from jaredledvina/feature/buster-support 
Feature: Debian 10 (Buster) support
 2019-10-07 20:01:33 +02:00
Sebastian Gumprich 22f77667f0 Merge pull request #246 from szEvEz/fix-openssh-client-package 
fix broken packages, extend README with furhter development instructions
 2019-10-04 17:10:17 +02:00
Sebastian Gumprich ba457ee080 Merge pull request #240 from bschonec/add_some_parameters 
Added ssh_syslog_facility, ssh_log_level and ssh_strict_modes parameters
 2019-09-27 14:17:58 +02:00
Sebastian Gumprich 13f698fcda Update main.yml 2019-09-26 21:54:23 +02:00
Sebastian Gumprich 8f44b6edd9 Merge pull request #234 from gobind-singh/version_comparison 
changed string comparison to version comparison
 2019-09-15 19:37:19 +02:00
Sebastian Gumprich 2b7201a8a3 Merge pull request #233 from dev-sec/fix_189 
set UsePAM to yes by default
 2019-09-12 22:21:23 +02:00
Sebastian Gumprich b7bc40bb74 Merge pull request #231 from MatthiasLohr/feature/MatchAddress 
added support for `ssh_server_match_address` (#230)
 2019-08-05 14:43:43 +02:00
Sebastian Gumprich bba220e536 Merge pull request #227 from Normo/master 
Fix deprecation warnings in Ansible 2.8
 2019-06-07 10:12:08 +02:00
Sebastian Gumprich d6ec19e79f Merge pull request #228 from Normo/fix-test 
Fix squash_actions deprecation in test playbooks
 2019-06-06 15:03:55 +02:00
Sebastian Gumprich c36b360f9c Merge pull request #225 from dev-sec/fix_224 
use correct variable ssh_custom_options in ssh_config template
 2019-05-17 10:24:57 +02:00
Sebastian Gumprich 7457337c4a Merge pull request #222 from dev-sec/fix_221 
fix indentation for matches
 2019-05-07 22:02:23 +02:00
Sebastian Gumprich c0e5710e2f Merge pull request #220 from dev-sec/fix_sel 
Fix selinux inclusion
 2019-04-30 15:46:25 +02:00
Sebastian Gumprich 7907e48058 Merge pull request #214 from guilieb/master 
fix: allow other ssh ports using selinux
 2019-04-30 15:27:15 +02:00
Sebastian Gumprich 690ec7ba41 Merge pull request #218 from dev-sec/remove_eol_os 
Remove eol os and add fedora
 2019-04-29 16:28:25 +02:00
Sebastian Gumprich 0dfaf0af42 Merge pull request #217 from dev-sec/move_custom 
document and move custom variables
 2019-04-29 15:56:36 +02:00
Sebastian Gumprich 15dd4d344e Merge pull request #202 from dev-sec/1810_support 
enable ssh 7.7p1 support
 2019-04-14 15:52:19 +02:00
Sebastian Gumprich f0cbcc5536 Merge pull request #208 from dev-sec/fix_207 
fix multiple match rules not working #207
 2019-03-20 09:42:30 +01:00
Sebastian Gumprich a69a3cae21 Merge pull request #203 from kofonfor/testkitchen-fixes 
Fix ssh and sshd config files to satisfy inspec reqs on all Testkitchen setups
 2019-03-01 08:11:16 +01:00
Sebastian Gumprich 4b52a37c06 Merge pull request #204 from kofonfor/ansible_lint 
Make ansible-lint happy
 2019-02-27 17:55:57 +01:00
Sebastian Gumprich 75f7153a6d Merge pull request #201 from jonaswre/master 
Removed DEPRECATION WARNING for apt, using list instead of with_items
 2019-01-13 15:55:08 +01:00
Sebastian Gumprich c391a0c678 Merge pull request #195 from dev-sec/fix_190 
parameterize PermitRootLogin
 2018-11-18 18:48:11 +01:00
Sebastian Gumprich cff51e126d Merge pull request #199 from MatthiasLohr/feature/CustomOptions 
Support for custom configuration
 2018-11-18 18:45:58 +01:00
Sebastian Gumprich eacd9c12ff fix linting problems 2018-11-18 10:27:44 +01:00
Sebastian Gumprich 330173e911 remove duplicate Parameter 2018-11-18 09:58:21 +01:00
Sebastian Gumprich dd8c27ba4e remove duplicate Parameter 2018-11-18 09:53:11 +01:00
Sebastian Gumprich 21c903f4d4 remove duplicate Parameter 2018-11-18 09:40:47 +01:00
Sebastian Gumprich c7e102a118 Merge pull request #196 from ikr0m/patch-1 
Update opensshd.conf.js
 2018-11-14 20:42:01 +01:00
Sebastian Gumprich 833a173c3c Merge pull request #194 from szEvEz/master 
set 'GSSAPIAuthentication yes' if variable 'ssh_gssapi_support' is set to 'true'
 2018-11-10 19:44:51 +01:00
Sebastian Gumprich 96053b7764 Merge pull request #187 from Neophy7e/fixes/use-ansible-version-compare 
Use ansible version compare module
 2018-11-07 06:47:59 +01:00
Sebastian Gumprich 15789273b6 revert accidentally master commit 
Signed-off-by: neophy7e <[email protected]>
 2018-11-06 23:00:20 +01:00
Sebastian Gumprich 45dd45b375 revert accidentally master commit 2018-10-17 12:53:40 +02:00
Sebastian Gumprich 32bab1552d add back baseline check sshd-15 2018-10-17 12:48:36 +02:00
Sebastian Gumprich 6e320949e4 Merge pull request #186 from dev-sec/1804 
add ubuntu 18.04 support
 2018-10-15 16:17:39 +02:00
Sebastian Gumprich 8c415e3836 use systemd in travis 1804 2018-10-09 08:55:33 +02:00
Sebastian Gumprich 1c347afc08 Update issue templates 2018-10-06 18:54:26 +02:00
Sebastian Gumprich 4031d7cc10 Merge pull request #179 from dev-sec/remove_weak 
update config of kex, macs, ciphers
 2018-09-16 14:43:28 +02:00
Sebastian Gumprich 8e6ff59fe5 Merge pull request #177 from BedrockSolutions/master 
Dependency flag
 2018-08-21 12:11:42 +02:00
Sebastian Gumprich 6b2e45cbae Merge pull request #181 from dev-sec/kitchen_travis 
remove oracle7 from travis tests for the time being
 2018-08-15 16:45:14 +02:00
Sebastian Gumprich c5a579f8aa Merge pull request #180 from dev-sec/kitchen_travis 
Kitchen travis
 2018-08-15 15:10:49 +02:00
Sebastian Gumprich 606e90f42f Delete output.txt 2018-08-14 17:42:59 +02:00
Sebastian Gumprich 544141215e Merge pull request #178 from dev-sec/travis 
add debian 9 and a comment
 2018-08-14 16:32:42 +02:00
Sebastian Gumprich e6d79fa3fb Merge pull request #173 from dev-sec/travis 
Travis
 2018-07-02 14:00:34 +02:00
Sebastian Gumprich 7949628914 Merge pull request #163 from dev-sec/new_tests 
New tests
 2018-06-29 19:47:04 +02:00
Sebastian Gumprich 75f1fe4b7f Merge pull request #162 from dev-sec/refactor 
yaml-lint update, refactor tasks
 2018-06-29 19:46:06 +02:00
Sebastian Gumprich 5e3fec7c16 Merge pull request #171 from jbronn/openbsd 
OpenBSD Support
 2018-06-25 15:28:45 +02:00
Sebastian Gumprich 026485b3b5 Merge pull request #166 from b1-systems/feature/disable_sftp_chroot 
Implement disabling chroot for sftp
 2018-05-16 15:43:26 +02:00
Sebastian Gumprich a163ef4945 Update README.md 2018-04-29 12:48:39 +02:00
Sebastian Gumprich 2141e6827d Update README.md 2018-04-26 16:48:16 +02:00
Sebastian Gumprich c76ca94f6e update readme for sftp, fix #165 2018-04-26 16:47:47 +02:00
Sebastian Gumprich 045dbeabac Merge pull request #156 from rcII/add-pam-device-2fa-config 
Adds sshd config for keyboard-interactive pam device
 2018-04-20 21:09:42 +02:00