andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
634 Commits 14 Branches 64 Tags
a46642ee92786354da801383c9bfb652f41e47af
Commit Graph
634 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
abtreece a8b225f2f6 Remove comment from sshd config HostKey param 
Fix for GitHub issue #262

Signed-off-by: abtreece <[email protected]>
 2020-01-22 13:51:25 -06:00
Sebastian Gumprich 4ee9bf2224 Merge pull request #254 from lunarthegrey/patch-1 
Support KEX for OpenSSH 8.0+ & quantum resistant KEX
 2020-01-17 19:26:23 +01:00
Sebastian Gumprich d1824a8417 Merge pull request #257 from brnck/tcp_options 
Add 'all', 'local', 'yes', 'no' options support for AllowTcpForwarding variable
 2019-12-01 14:05:52 +01:00
Augustas Berneckas b0139c7abf Drop boolean support for AllowTcpForwarding variable 
Signed-off-by: Augustas Berneckas <[email protected]>
 2019-11-26 22:57:34 +02:00
Augustas Berneckas 8e83579a7c Add 'all', 'local', 'yes', 'no' options support for AllowTcpForwarding variable 
Signed-off-by: Augustas Berneckas <[email protected]>
 2019-11-26 22:55:54 +02:00
Lunar 435ee7fd4a Add [email protected] KEX 
Signed-off-by: Lunar <[email protected]>
 2019-11-04 13:19:16 -06:00
Lunar a6e95f3fd4 Support KEX for OpenSSH 8.0+ 
Signed-off-by: Lunar <[email protected]>
 2019-11-04 13:19:16 -06:00
Sebastian Gumprich 21e442c65c Merge pull request #252 from Slamdunk/patch-1 
SFTP: set default umask to 0027
 2019-10-18 11:32:49 +02:00
Filippo Tessarotto 998aa27228 Configurable sftp umask 2019-10-18 08:05:11 +02:00
Filippo Tessarotto 35abff1ee0 SFTP: set default umask to 0027 2019-10-18 07:59:37 +02:00
Sebastian Gumprich 9286eedc47 Merge pull request #251 from szEvEz/separate-vars 
Separate PermitUserEnviroment from AcceptEnv
 2019-10-15 19:32:03 +02:00
Sebastian Gumprich bb4feda34e Update opensshd.conf.j2 2019-10-15 18:21:00 +02:00
szEvEz 4138adcf28 add variable for PermitUserEnvironment value, extend tests with values for ssh_server_accept_env_vars and ssh_server_permit_environment_vars 
Signed-off-by: szEvEz <[email protected]>
 2019-10-14 15:20:54 +02:00
Sebastian Gumprich a5a188698b Merge pull request #245 from szEvEz/refactor-authentication-methods 
refactor authenticationmethod settings, allow user to set authenticat…
 2019-10-13 20:24:35 +02:00
szEvEz b7580b3e4f add missing variable to defaults 
Signed-off-by: szEvEz <[email protected]>
 2019-10-13 18:54:55 +02:00
szEvEz 397594a698 Separate PermitUserEnviroment from AcceptEnv 
Signed-off-by: szEvEz <[email protected]>
 2019-10-13 15:42:10 +02:00
szEvEz 686972f1bb add version check for AuthenticationMethods 
Signed-off-by: szEvEz <[email protected]>
 2019-10-13 13:19:32 +02:00
Sebastian Gumprich b6f947c7a2 Merge pull request #242 from Furragen/master 
RHEL/OL/CentOS 8 support
 2019-10-12 22:04:12 +02:00
Sebastian Gumprich f4db6497a2 use correct debian 10 image in kitchen vagrant file 2019-10-07 20:09:54 +02:00
Sebastian Gumprich 0bb55985e7 Merge pull request #249 from jaredledvina/feature/buster-support 
Feature: Debian 10 (Buster) support
 2019-10-07 20:01:33 +02:00
Jared Ledvina c47ca9092a Galaxy - Add Debian 10 Buster 
Signed-off-by: Jared Ledvina <[email protected]>
 2019-10-06 00:53:42 -04:00
Jared Ledvina f60955275a TravisCI - Add Debian 10 
Signed-off-by: Jared Ledvina <[email protected]>
 2019-10-06 00:53:23 -04:00
Jared Ledvina 411a989959 Kitchen - Add Debian 10 
Signed-off-by: Jared Ledvina <[email protected]>
 2019-10-06 00:52:40 -04:00
Jared Ledvina 6b4aab3764 Kitchen vagrant - Add Debian 10 
Signed-off-by: Jared Ledvina <[email protected]>
 2019-10-06 00:51:39 -04:00
Furragen fdfa4d763b some cleanup and centos8 support 
Signed-off-by: Furragen <[email protected]>
 2019-10-05 14:05:32 +02:00
Sebastian Gumprich 22f77667f0 Merge pull request #246 from szEvEz/fix-openssh-client-package 
fix broken packages, extend README with furhter development instructions
 2019-10-04 17:10:17 +02:00
szEvEz dd3a105b91 fix broken packages, extend README with furhter development instructions 
Signed-off-by: szEvEz <[email protected]>
 2019-10-02 22:43:37 +02:00
szEvEz bea269a7ff refactor authenticationmethod settings, allow user to set authenticationmethods by hhimself 
Signed-off-by: szEvEz <[email protected]>
 2019-10-02 22:15:48 +02:00
Sebastian Gumprich ba457ee080 Merge pull request #240 from bschonec/add_some_parameters 
Added ssh_syslog_facility, ssh_log_level and ssh_strict_modes parameters
 2019-09-27 14:17:58 +02:00
Schonecker, Brian f41747c526 # This is a combination of 2 commits. 
# The first commit's message is:

Added ssh_syslog_facility, ssh_log_level and ssh_strict_modes parameters.

Signed-off-by: Schonecker, Brian <[email protected]>

# The 2nd commit message will be skipped:

#	Added ssh_syslog_facility, ssh_log_level and ssh_strict_modes parameters.
 2019-09-27 06:14:42 -04:00
Sebastian Gumprich 13f698fcda Update main.yml 2019-09-26 21:54:23 +02:00
Sebastian Gumprich 8d8456aec8 release 7.0.0 2019-09-17 21:18:38 +02:00
Sebastian Gumprich 8f44b6edd9 Merge pull request #234 from gobind-singh/version_comparison 
changed string comparison to version comparison
 2019-09-15 19:37:19 +02:00
Gobind Singh b25d9ea999 changed string comparison to version comparison 
Signed-off-by: Gobind Singh <[email protected]>
 2019-09-14 15:30:25 +05:30
Sebastian Gumprich 2b7201a8a3 Merge pull request #233 from dev-sec/fix_189 
set UsePAM to yes by default
 2019-09-12 22:21:23 +02:00
Sebastian Gumprich 439c3eec1a set UsePAM to yes by default 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-08-31 18:31:49 +02:00
Sebastian Gumprich ce23e04292 update to 6.2.0 2019-08-07 10:54:07 +02:00
Sebastian Gumprich b7bc40bb74 Merge pull request #231 from MatthiasLohr/feature/MatchAddress 
added support for `ssh_server_match_address` (#230)
 2019-08-05 14:43:43 +02:00
Matthias Lohr b60fe1b3b5 added support for ssh_server_match_address (#230) 
Signed-off-by: Matthias Lohr <[email protected]>
 2019-08-02 11:46:15 +02:00
Sebastian Gumprich 9076895e2d update to 6.1.3 2019-06-09 11:20:52 +02:00
Sebastian Gumprich bba220e536 Merge pull request #227 from Normo/master 
Fix deprecation warnings in Ansible 2.8
 2019-06-07 10:12:08 +02:00
Norman Bestfleisch 77b02f8a43 CONDITIONAL_BARE_VARS deprecation fix in when condition 
Signed-off-by: Norman Bestfleisch <[email protected]>
 2019-06-07 07:53:53 +02:00
Sebastian Gumprich d6ec19e79f Merge pull request #228 from Normo/fix-test 
Fix squash_actions deprecation in test playbooks
 2019-06-06 15:03:55 +02:00
Norman Bestfleisch eda078bfe2 Fix squash_actions deprecation in test playbooks 
Signed-off-by: Norman Bestfleisch <[email protected]>
 2019-06-06 14:38:34 +02:00
Sebastian Gumprich 8b71e3fbca update version to 6.1.2 2019-05-17 10:37:24 +02:00
Sebastian Gumprich c36b360f9c Merge pull request #225 from dev-sec/fix_224 
use correct variable ssh_custom_options in ssh_config template
 2019-05-17 10:24:57 +02:00
Sebastian Gumprich ae630c3072 use correct variable ssh_custom_options in ssh_config template 
fix #224

Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-05-17 09:55:35 +02:00
Sebastian Gumprich c7039e3fd9 release version 6.1.1 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-05-07 22:06:11 +02:00
Sebastian Gumprich 7457337c4a Merge pull request #222 from dev-sec/fix_221 
fix indentation for matches
 2019-05-07 22:02:23 +02:00
Sebastian Gumprich c592fd61db add diff to travis run 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-05-07 21:52:54 +02:00