andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
634 Commits 14 Branches 64 Tags
a46642ee92786354da801383c9bfb652f41e47af
Commit Graph
634 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastian Gumprich e8f58de183 add diff to travis run 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-05-07 21:48:55 +02:00
Sebastian Gumprich ba190fb509 fix indentation for matches 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-05-07 21:42:36 +02:00
Sebastian Gumprich 1570b053d1 remove blank lines 2019-05-04 15:52:01 +02:00
Sebastian Gumprich c70fab4cde release 6.1.0 2019-05-04 15:34:08 +02:00
Sebastian Gumprich c0e5710e2f Merge pull request #220 from dev-sec/fix_sel 
Fix selinux inclusion
 2019-04-30 15:46:25 +02:00
Sebastian Gumprich 53e0e60520 fix more selinux stuff 2019-04-30 15:30:59 +02:00
Sebastian Gumprich 7e065416da fix selinux stuff 2019-04-30 15:30:35 +02:00
Sebastian Gumprich 7907e48058 Merge pull request #214 from guilieb/master 
fix: allow other ssh ports using selinux
 2019-04-30 15:27:15 +02:00
Guillaume Bernard 0941b75097 fix: allow other ssh ports using selinux 
Signed-off-by: Guillaume Bernard <[email protected]>
 2019-04-29 19:48:54 +02:00
Sebastian Gumprich e5a64ccc6f replace beaver with bionic 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-04-29 17:00:56 +02:00
Sebastian Gumprich 690ec7ba41 Merge pull request #218 from dev-sec/remove_eol_os 
Remove eol os and add fedora
 2019-04-29 16:28:25 +02:00
Sebastian Gumprich d9063435e6 add exception for hostkey-gen for fedora 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-04-29 16:17:43 +02:00
Sebastian Gumprich 71fe723438 remove and add from travis, too 2019-04-29 16:03:02 +02:00
Sebastian Gumprich 0dfaf0af42 Merge pull request #217 from dev-sec/move_custom 
document and move custom variables
 2019-04-29 15:56:36 +02:00
Sebastian Gumprich ad84360761 update readme and ansible meta 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-04-29 15:56:13 +02:00
Sebastian Gumprich 858f3b7775 remove EOL'd operating systems 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-04-29 15:51:14 +02:00
Sebastian Gumprich f911ea9c0b document and move custom variables 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-04-29 15:33:19 +02:00
Sebastian Gumprich 15dd4d344e Merge pull request #202 from dev-sec/1810_support 
enable ssh 7.7p1 support
 2019-04-14 15:52:19 +02:00
Sebastian Gumprich f0cbcc5536 Merge pull request #208 from dev-sec/fix_207 
fix multiple match rules not working #207
 2019-03-20 09:42:30 +01:00
Sebastian Gumprich 20ca116511 fix multiple match rules not working 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-03-15 21:04:50 +01:00
Sebastian Gumprich f2576a05c5 fix multiple match rules not working 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-03-15 17:41:23 +01:00
Sebastian Gumprich a69a3cae21 Merge pull request #203 from kofonfor/testkitchen-fixes 
Fix ssh and sshd config files to satisfy inspec reqs on all Testkitchen setups
 2019-03-01 08:11:16 +01:00
Alex Chistyakov ccc51553a9 Add ssh-14, ssh-15 and sshd-15 controls back to inspec-tests 
Signed-off-by: Alex Chistyakov <[email protected]>
 2019-03-01 01:59:34 +03:00
Sebastian Gumprich 4b52a37c06 Merge pull request #204 from kofonfor/ansible_lint 
Make ansible-lint happy
 2019-02-27 17:55:57 +01:00
Alex Chistyakov c6ff1d3cbf Make ansible-lint happy 
Signed-off-by: Alex Chistyakov <[email protected]>
 2019-02-23 21:55:34 +03:00
Alex Chistyakov 2616b36071 Satisfy requirements of controls 'ssh-14' and 'ssh-15' 
Signed-off-by: Alex Chistyakov <[email protected]>
 2019-02-23 20:59:13 +03:00
Alex Chistyakov f8cb5635a0 Put "UseLogin" config option back for OpenSSH ver. 7.4 and lower to conform to control 'sshd-15' 
Signed-off-by: Alex Chistyakov <[email protected]>
 2019-02-23 20:59:13 +03:00
Sebastian Gumprich 6aeb8678cb enable ssh 7.7p1 support 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2019-02-02 20:00:20 +01:00
Sebastian Gumprich 75f7153a6d Merge pull request #201 from jonaswre/master 
Removed DEPRECATION WARNING for apt, using list instead of with_items
 2019-01-13 15:55:08 +01:00
Jonas Wrede 3bbafc086d Removed DEPRECATION WARNING for apt, using list instead of with_items 
Signed-off-by: Jonas Wrede <[email protected]>
 2019-01-13 15:36:09 +01:00
Sebastian Gumprich aefbc79731 update changelog 2018-12-20 20:21:55 +01:00
Sebastian Gumprich c391a0c678 Merge pull request #195 from dev-sec/fix_190 
parameterize PermitRootLogin
 2018-11-18 18:48:11 +01:00
Sebastian Gumprich cff51e126d Merge pull request #199 from MatthiasLohr/feature/CustomOptions 
Support for custom configuration
 2018-11-18 18:45:58 +01:00
Sebastian Gumprich eacd9c12ff fix linting problems 2018-11-18 10:27:44 +01:00
Sebastian Gumprich 330173e911 remove duplicate Parameter 2018-11-18 09:58:21 +01:00
Sebastian Gumprich dd8c27ba4e remove duplicate Parameter 2018-11-18 09:53:11 +01:00
Sebastian Gumprich 21c903f4d4 remove duplicate Parameter 2018-11-18 09:40:47 +01:00
Matthias Lohr daa3b0393e modified testcase 
Signed-off-by: Matthias Lohr <[email protected]>
 2018-11-16 14:06:34 +01:00
Matthias Lohr 1755515881 added test configuration 
Signed-off-by: Matthias Lohr <[email protected]>
 2018-11-16 10:49:14 +01:00
Matthias Lohr 0a0735be84 support for custom configuration 
Signed-off-by: Matthias Lohr <[email protected]>
 2018-11-16 07:39:05 +01:00
Sebastian Gumprich 8a6aa66ab4 parameterize PermitRootLogin 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2018-11-15 21:09:17 +01:00
Sebastian Gumprich c7e102a118 Merge pull request #196 from ikr0m/patch-1 
Update opensshd.conf.js
 2018-11-14 20:42:01 +01:00
Ikrom a6d1870c58 Update opensshd.conf.js 
Typo fixed
 2018-11-14 09:11:07 +05:00
Sebastian Gumprich 833a173c3c Merge pull request #194 from szEvEz/master 
set 'GSSAPIAuthentication yes' if variable 'ssh_gssapi_support' is set to 'true'
 2018-11-10 19:44:51 +01:00
szEvEz ed9447ad00 updated README for new default parameter value, GSSAPICleanupCredentials should always equal yes 2018-11-10 19:31:32 +01:00
szEvEz cfc77ad82b set ssh_gssapi_support by default to false 2018-11-10 19:21:12 +01:00
szEvEz 3e3e85b769 set 'GSSAPIAuthentication yes' if variable 'ssh_gssapi_support' is set to 'true' 
Signed-off-by: szEvEz <[email protected]>
 2018-11-09 22:38:35 +01:00
Sebastian Gumprich 96053b7764 Merge pull request #187 from Neophy7e/fixes/use-ansible-version-compare 
Use ansible version compare module
 2018-11-07 06:47:59 +01:00
neophy7e e0e2ea5b44 Change minimal ansible version to 2.5 
Signed-off-by: neophy7e <[email protected]>
 2018-11-06 23:00:20 +01:00
neophy7e 1e3a4748f0 Remove equality check 
Signed-off-by: neophy7e <[email protected]>
 2018-11-06 23:00:20 +01:00