andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
634 Commits 14 Branches 64 Tags
a46642ee92786354da801383c9bfb652f41e47af
Commit Graph
634 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastian Gumprich 4c248a4901 remove obsolete include_task 2020-07-09 13:33:19 +02:00
Martin Schurz 18be974509 remove crypto.yml 
move include tasks to hardening.yml and remove intermediate crypto.yml

Signed-off-by: Martin Schurz <[email protected]>
 2020-07-09 12:56:39 +02:00
Martin Schurz 5e47ffae35 split crypto.yml in several playbooks 
preserve the version ordering of defaults and group all tasks according
to base configuration variable (cipthers, hostkeys, kex and macs)

Signed-off-by: Martin Schurz <[email protected]>
 2020-07-09 11:46:23 +02:00
dev-sec CI d87f6c6212 update changelog 2020-07-09 06:22:57 +00:00
Sebastian Gumprich 41aef7eb80 Merge pull request #304 from dev-sec/fix_typo 
fix typo in hardening.yml
 2020-07-09 08:20:03 +02:00
Martin Schurz 83263cf8ce add blocks to crypto.yml checks 
moved the check for user supplied settings to block head and reversed
order of assignments to compensate for the missing check on the set
variable

Signed-off-by: Martin Schurz <[email protected]>
 2020-07-09 00:30:45 +02:00
Martin Schurz 9d56e9c6dd fix typo in hardening.yml 
Signed-off-by: Martin Schurz <[email protected]>
 2020-07-08 22:42:32 +02:00
dev-sec CI 00f5f46c3a update changelog 2020-07-06 07:46:43 +00:00
Sebastian Gumprich 22580d853f Merge pull request #301 from dev-sec/fix_fedora_tests 
fix package install in tests
 2020-07-06 09:44:10 +02:00
Sebastian Gumprich 44424474b8 fix package install in tests 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-07-06 09:27:15 +02:00
dev-sec CI 64b86d48a8 update changelog 2020-07-06 06:38:57 +00:00
Sebastian Gumprich 5b96f66835 Merge pull request #300 from divialth/feature/customize_sshd_x11forward 
allow customization of X11Forwarding
 2020-07-06 08:36:07 +02:00
divialth b5780c9d95 add x11forward options 
Signed-off-by: divialth <[email protected]>
 2020-07-03 14:51:57 +02:00
dev-sec CI 9a3d089fcb update changelog 2020-06-25 11:47:04 +00:00
Sebastian Gumprich d06c87386f Merge pull request #298 from dev-sec/rndmh3ro-patch-2 
add centos 8 to meta
 2020-06-25 13:44:17 +02:00
Sebastian Gumprich 573f2483f5 add centos 8 to meta 2020-06-25 13:43:43 +02:00
dev-sec CI 4f1a04b3a5 update changelog 2020-06-22 18:33:06 +00:00
schurzi beb77e4c96 Merge pull request #295 from aisbergg/feat-match-local-port 
Add option to create 'LocalPort' match blocks
 2020-06-22 20:30:15 +02:00
Andre Lehmann fb8ac0a42b Add option to create 'LocalPort' match block 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-22 18:05:38 +02:00
dev-sec CI f560d51447 update changelog 2020-06-20 07:10:04 +00:00
Sebastian Gumprich 3f962b540f Merge pull request #290 from aisbergg/harmonize-style 
Harmonize style
 2020-06-20 09:07:04 +02:00
Sebastian Gumprich ce41b9f89a Merge branch 'master' into harmonize-style 2020-06-20 08:56:47 +02:00
Andre Lehmann c141f12d1e Swap conditions 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-18 21:23:32 +02:00
dev-sec CI 508c666d58 update changelog 2020-06-18 18:59:00 +00:00
Sebastian Gumprich b27c679a51 Merge pull request #291 from djesionek/master 
Add archlinux support
 2020-06-18 20:55:56 +02:00
Damian JesionekandSebastian Gumprich 6c8165b3c8 Update .travis.yml according suggestion 
Co-authored-by: Sebastian Gumprich <[email protected]>
Signed-off-by: Damian Jesionek <[email protected]>
 2020-06-18 20:21:41 +02:00
Damian Jesionek 9a38fdbc3d Added task installing ssh on arch environments 
Signed-off-by: Damian Jesionek <[email protected]>
 2020-06-18 20:21:41 +02:00
Damian Jesionek 874d09d645 Added task installing ssh on arch environments 
Signed-off-by: Damian Jesionek <[email protected]>
 2020-06-18 20:21:41 +02:00
Damian Jesionek faf4b19db8 Added Archlinux as supported platform in the meta 
Signed-off-by: Damian Jesionek <[email protected]>
 2020-06-18 20:21:41 +02:00
Damian Jesionek e1811e5f4a Added testenvironment for archlinux 
Signed-off-by: Damian Jesionek <[email protected]>
 2020-06-18 20:21:41 +02:00
Damian Jesionek 4a3d5392fe Added Archlinux support 
Signed-off-by: Damian Jesionek <[email protected]>
 2020-06-18 20:21:41 +02:00
Andre Lehmann 0777322372 Remove trailing whitespace 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-17 19:36:28 +02:00
Andre Lehmann d427881edc Rework condition and fix comment 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-17 19:15:59 +02:00
Andre Lehmann 2ad774f7df Add space in variable placeholder 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-17 19:15:59 +02:00
Andre Lehmann e25bc666f4 Fix linting issue 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-17 19:15:59 +02:00
Andre Lehmann 26db1123af Reformat very long condition 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-17 19:15:59 +02:00
Andre Lehmann 5992bbae0d Harmonize style 
Changes include:
- change of indentation
- consistent use of single quotes
- name of all tasks beginn with lower case
- explicit begin in all YAML files
- use of 'loop' instead of old style 'with_items'

Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-17 19:15:59 +02:00
Andre Lehmann aa908ae169 Correct usage of comment filter 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-17 19:15:59 +02:00
Andre Lehmann c845df464b Make use of lstrip_blocks 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-17 19:15:59 +02:00
Andre Lehmann 3cfc11b0fb Fix validation issue when using 'Match LocalPort' 
Using 'Match LocalPort' in the configuration results in an error:

    'Match LocalPort' in configuration but 'lport' not in connection test
    specification.

Adding '-C lport=22' to the validation fixes this issue.

Signed-off-by: Andre Lehmann <[email protected]>
 2020-06-17 19:15:59 +02:00
dev-sec CI 36a038b6dd update changelog 2020-06-06 08:28:45 +00:00
Sebastian Gumprich 1e9df18b64 Merge pull request #289 from dev-sec/unify_actions 
unify changelog and release actions
 2020-06-06 10:25:53 +02:00
Sebastian Gumprich e8a2906d24 unify changelog and release actions 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-06-06 10:23:27 +02:00
dev-sec CI fba69f3ddb update changelog 2020-06-04 04:49:56 +00:00
Sebastian Gumprich 3480143584 Merge pull request #288 from jeanmonet/patch-1 
`ssh_allow_tcp_forwarding`: use quotes for values
 2020-06-04 06:48:03 +02:00
jeanmonet 28b295ada7 ssh_allow_tcp_forwarding: use quotes for values 
Values passed to `ssh_allow_tcp_forwarding` must be strings. Avoid Ansible converting `yes` and `no` to boolean by quoting the values (ie `'yes'`, `'no'`).

Signed-off-by: jenmonet <[email protected]>
 2020-06-03 22:27:30 +02:00
dev-sec CI c615fca579 update changelog 2020-06-02 07:03:04 +00:00
Sebastian Gumprich 21bec11b09 Merge pull request #287 from dev-sec/chris-rock/customize-ssh-params 
allow customization of login gracetime and max sessins
 2020-06-02 08:57:30 +02:00
dev-sec CI f1b5f61736 update changelog 2020-06-01 12:00:17 +00:00
Christoph Hartmann 09a655a8b4 allow customization of login gracetime and max sessins 
Signed-off-by: Christoph Hartmann <[email protected]>
 2020-06-01 10:02:31 +02:00