andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
634 Commits 14 Branches 64 Tags
a46642ee92786354da801383c9bfb652f41e47af
Commit Graph
634 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dev-sec CI 2d876f67ef update changelog 2020-05-18 08:40:47 +00:00
Sebastian Gumprich 2c0fb49dee Merge pull request #284 from aqw/master 
make ssh client-side compression configurable
 2020-05-18 10:33:45 +02:00
Alex Waite c099004b98 make ssh client-side compression configurable 
Signed-off-by: Alex Waite <[email protected]>
 2020-05-16 09:52:14 +02:00
dev-sec CI 8d6ec28c5e update changelog 2020-05-15 13:52:44 +00:00
dev-sec CI 901260153d update changelog 2020-05-15 09:17:42 +00:00
dev-sec CI 33ee223dea update changelog 2020-05-13 08:13:26 +00:00
dev-sec CI acd48f0f10 update changelog 2020-05-12 11:23:46 +00:00
Sebastian Gumprich 40f1f25a5a fix release action 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-05-09 20:47:16 +02:00
Sebastian Gumprich 5f741a6f9a Update release.yml 2020-05-09 20:26:19 +02:00
Sebastian Gumprich 9e04f7bc1e Update release.yml 2020-05-09 20:21:38 +02:00
dev-sec CI 3f3b2c3619 update changelog 2020-05-09 17:55:38 +00:00
dev-sec CI 8ab659243c update changelog 2020-05-09 17:52:12 +00:00
Sebastian Gumprich 0995761706 Merge pull request #282 from dev-sec/workflows 
add changelog and release workflow
 2020-05-09 19:50:59 +02:00
Sebastian Gumprich c574aa106c add changelog and release workflow 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-05-09 14:19:57 +02:00
Sebastian Gumprich 46204a99ab Update main.yml 2020-05-09 14:02:18 +02:00
Sebastian Gumprich f4cdcc0251 Merge pull request #281 from kostasns/fix_fedora_build 
fix: Ansible part of Fedora build
 2020-05-09 14:00:31 +02:00
Kostas f4106889f6 fix: Fedora build 
Signed-off-by: Kostas <[email protected]>
 2020-05-09 12:13:53 +03:00
Sebastian Gumprich 12f5a8c56a Merge pull request #280 from dev-sec/rndmh3ro-patch-1 
Add changelog action
 2020-05-08 19:40:28 +02:00
Sebastian Gumprich fc209f5838 Update main.yml 2020-05-08 19:39:44 +02:00
Sebastian Gumprich 6b1233b3cd Create main.yml 2020-05-08 19:36:40 +02:00
Sebastian Gumprich 9255b22c32 Merge pull request #278 from kostasns/issue_243 
feat: Allow to set custom list of HostKeyAlgorithms
 2020-05-08 19:27:28 +02:00
Sebastian Gumprich e1688e4766 Merge pull request #279 from kostasns/fix_amazon_build 
fix: Amazon linux build
 2020-05-08 19:24:04 +02:00
Sebastian Gumprich 07d39172b6 Merge pull request #277 from kostasns/ansible_facts 
fix(ansible_facts): replace few remaining facts from 'ansible_' to using 'ansible_facts' dictionary
 2020-05-08 19:23:15 +02:00
Kostas 101ec2879d fix(template): do not include Amazon distribution in Redhat families with major version lower than 6 
Signed-off-by: Kostas <[email protected]>
 2020-05-08 16:33:25 +03:00
Kostas 51ab13d34e fix(test): fix default test as well 
Signed-off-by: Kostas <[email protected]>
 2020-05-08 16:20:53 +03:00
Kostas 1d84996dbd fix(test): fix conditional to generate host keys on Amazon distribution 
Signed-off-by: Kostas <[email protected]>
 2020-05-08 16:12:45 +03:00
Kostas 0fdafae06c fix: set HostKeyAlgorithms only from version 5.8 
Signed-off-by: Kostas <[email protected]>
 2020-05-08 14:22:08 +03:00
Kostas 00df1544fc feat: Add ability to provide a list of Host Key Algorithms 
Signed-off-by: Kostas <[email protected]>
 2020-05-08 14:07:58 +03:00
Kostas 0fac54cacb use ansible_facts dictionary 
Signed-off-by: Kostas <[email protected]>
 2020-05-08 13:56:10 +03:00
Sebastian Gumprich 249e3a09dd update changelog 2020-05-05 21:44:20 +02:00
Sebastian Gumprich 63ddfd8948 Merge pull request #274 from paulfantom/patch-1 
vars: remove empty main.yml file
 2020-04-21 09:50:19 +02:00
Sebastian Gumprich 3de3975a91 Merge pull request #273 from ancoron/feature/ubuntu-dynamic-motd-banner 
Disable also dynamic MOTD via PAM if enabled - refs #271
 2020-04-18 15:32:14 +02:00
Paweł Krupa 46334752c5 vars: remove empty main.yml file 
Signed-off-by: paulfantom <[email protected]>
 2020-04-18 11:58:23 +02:00
Ancoron Luciferis b014b62757 Disable also dynamic MOTD via PAM if enabled - refs #271 
Signed-off-by: Ancoron Luciferis <[email protected]>
 2020-04-16 01:11:35 +02:00
Sebastian Gumprich 4a97d4dc29 Merge pull request #270 from foonix/rhel6-sha2-hmacs 
Use sha2 HMACs on RHEL 6 / CentOS 6.
 2020-04-13 16:26:36 +02:00
Jason McNew ffc7faeeea Oracle Linux 6.5 release notes indicate no OpenSSH package change from upstream, so use RHEL 6.5 HMACs. 
Signed-off-by: Jason McNew <[email protected]>
 2020-04-11 09:17:26 -04:00
Jason McNew defa6f78a4 Use sha2 HMACs on RHEL 6 / CentOS 6. 
Signed-off-by: Jason McNew <[email protected]>
 2020-04-03 15:43:48 -04:00
Sebastian Gumprich 3d351ef748 Merge branch 'PovilasGT-master' 2020-03-27 21:21:16 +01:00
Dennis Eriksen afe955799b Removing 2fa 
As discussed in #260, 2fa does not really belong in a role for
configuring ssh.

Signed-off-by: Dennis Eriksen <[email protected]>
 2020-03-27 21:21:05 +01:00
Sebastian Gumprich 78fc2befff Merge pull request #269 from dennisse/master 
Removing 2fa
 2020-03-27 20:00:38 +01:00
Dennis Eriksen f3458bc3cb Removing 2fa 
As discussed in #260, 2fa does not really belong in a role for
configuring ssh.

Signed-off-by: Dennis Eriksen <[email protected]>
 2020-03-25 12:44:45 +01:00
Povilas eb946eff0a Renaming ansible variables discovered from systems: Facts to be placed in new namespace ansible_facts.* 
Signed-off-by: Povilas <[email protected]>
 2020-03-24 16:54:55 +02:00
Povilas b720fd916c Renaming ansible variables discovered from systems: Facts to be placed in new namespace ansible_facts.* 
Signed-off-by: Povilas <[email protected]>
 2020-03-24 16:54:55 +02:00
Sebastian Gumprich 31c4895547 Merge pull request #267 from jbronn/moduli-when-hardening 
Only manage moduli when hardening server
 2020-03-10 16:42:29 +01:00
Justin Bronn d57f65e241 Only manage moduli when ssh_server_hardening is set. 
Signed-off-by: Justin Bronn <[email protected]>
 2020-03-10 10:24:29 -05:00
Sebastian Gumprich be3317da94 add ansible-lint 2020-02-18 17:52:21 +01:00
Sebastian Gumprich ed3748ff59 Merge pull request #266 from kljensen/remove-bash-dep 
Do not use bash to get ssh version
 2020-02-13 22:24:45 +01:00
Kyle L. Jensen f6370ca5e0 Add changed_when and check_mode options to ssh version check 
Signed-off-by: Kyle L. Jensen <[email protected]>
 2020-02-13 14:03:09 -05:00
Kyle L. Jensen ed9ec7c072 Do not use bash to get ssh version 
Signed-off-by: Kyle L. Jensen <[email protected]>
 2020-02-09 21:32:07 -05:00
Sebastian Gumprich 767540b5a0 Merge pull request #263 from abtreece/remove-comment-from-sshd-hostkey-param 
Remove comment from sshd config HostKey param
 2020-01-24 20:06:14 +01:00