Sebastian Gumprich
af2d5222ab
add 1804 vagrant support
2018-10-10 19:55:37 +02:00
Sebastian Gumprich
1b4a17f86e
add ubunti 18.04 support
2018-10-10 19:35:44 +02:00
Sebastian Gumprich
67f16f166c
add option to disable auditd
2018-09-16 20:56:48 +02:00
Sebastian Gumprich
cb05d55f9f
update changelog
2018-09-02 19:48:49 +02:00
Sebastian Gumprich
2d4f4d2717
update changelog
2018-09-02 19:44:29 +02:00
Sebastian Gumprich
834059d18c
fix problems with efi and vfat
2018-09-02 18:53:10 +02:00
Sebastian Gumprich
1dc093597d
do not install passwdqc on amz
2018-09-02 15:41:10 +02:00
Sebastian Gumprich
eb4fb325ae
add back run opts
2018-08-15 16:10:41 +02:00
Sebastian Gumprich
eb6df69be9
remove oravle7 for the time being
2018-08-15 15:36:29 +02:00
Sebastian Gumprich
26a1a759a8
fix oracle tests
2018-08-15 15:31:16 +02:00
Sebastian Gumprich
356d6ddb9d
add amazon run opts to travis
2018-08-15 15:13:59 +02:00
Sebastian Gumprich
e439904fd0
update minimum ansible version
2018-08-01 21:08:16 +02:00
Sebastian Gumprich
9b056d09e1
change symlink testing
2018-07-31 21:19:03 +02:00
Sebastian Gumprich
81af4bd99c
change minimize access method
2018-07-23 22:05:24 +02:00
Sebastian Gumprich
7b405df16e
use package instead of yum and apt
2018-07-09 21:45:02 +02:00
Sebastian Gumprich
aa9d52df07
add oracle7 to travis
2018-07-01 12:25:03 +02:00
Sebastian Gumprich
0d4287cf6b
Revert "add package-08 check (audit) to travis"
...
This reverts commit a3e9f1b4be
2018-06-29 21:59:22 +02:00
Sebastian Gumprich
a3e9f1b4be
add package-08 check (audit) to travis
2018-06-29 21:03:08 +02:00
Sebastian Gumprich
7962be63c2
remove always failing check from travis
2018-06-29 20:25:42 +02:00
Sebastian Gumprich
b7c6bfe036
fix wrong permissions passwdqc #170
2018-06-29 20:14:23 +02:00
Sebastian Gumprich
2c538c874d
change auditd option max_log_file_action
2018-06-29 20:09:01 +02:00
Sebastian Gumprich
853df23b46
Merge branch 'master' of github.com:dev-sec/ansible-os-hardening into auditd
2018-06-29 19:44:23 +02:00
Sebastian Gumprich
7682ff957a
add amazon linux testing
2018-01-15 18:06:07 +01:00
Sebastian Gumprich
e89ea699b4
update changelog
2018-01-03 21:01:33 +01:00
Sebastian Gumprich
19b8788a39
remove unused parameter from readme
2018-01-03 10:43:13 +01:00
Sebastian Gumprich
f13c1ed47b
update vagrnat boxes
2018-01-03 10:43:13 +01:00
Sebastian Gumprich
ac420b8edd
add martian sysctl parameter
2018-01-03 10:43:13 +01:00
Sebastian Gumprich
9a5e6f7f1c
temporary remove oracle7 from travis
2018-01-02 18:53:23 +01:00
Sebastian Gumprich
deec0be0a6
replace single ticks with double ticks. fix #151
2017-10-27 20:17:55 +02:00
Sebastian Gumprich
3cb86a6202
update changelog
2017-09-13 18:02:21 +02:00
Sebastian Gumprich
ac763330a9
add diff to travis run
2017-09-03 19:48:29 +02:00
Sebastian Gumprich
cccde992fc
mv template files according to directories
2017-09-03 19:26:37 +02:00
Sebastian Gumprich
5a0a686e61
Merge branch 'auditd' of github.com:dev-sec/ansible-os-hardening into auditd
2017-09-03 19:26:05 +02:00
Sebastian Gumprich
29e678904e
mv template files according to directories
2017-09-03 19:22:42 +02:00
Sebastian Gumprich
10f51ad0eb
change package name of audit
2017-08-08 21:46:35 +02:00
Sebastian Gumprich
01b5dd1bbb
install and configure auditd
2017-08-08 21:32:04 +02:00
Sebastian Gumprich
31d7dbeef4
move variable to right file
2017-08-07 22:12:48 +02:00
Sebastian Gumprich
fde065d31b
rebasing
2017-08-07 21:57:46 +02:00
Sebastian Gumprich
8f7c7ba84c
install modprobe package,
...
check for modprobe
use apt and yum instead of package
Revert "use apt and yum instead of package"
This reverts commit 215a97b1867a7a8af5e0e64e9f77181d4c4a5050.
use latest to install kmod
run apt-get update
2017-08-07 21:56:08 +02:00
Sebastian Gumprich
db517e9539
change vars file loading
2017-08-07 21:55:30 +02:00
Sebastian Gumprich
e879831819
add passwd vars
2017-08-07 21:55:30 +02:00
Sebastian Gumprich
41feffdc17
add kitchen to os_ignore_user to fix #124
2017-08-07 21:53:56 +02:00
Sebastian Gumprich
ef1c718ba7
remove execshield on rhel7
2017-08-07 21:53:56 +02:00
Sebastian Gumprich
de6653d9bb
add shadow task
2017-08-07 21:53:37 +02:00
Sebastian Gumprich
1303e0c7fe
change vars file loading
2017-08-07 21:27:20 +02:00
Sebastian Gumprich
62d20e299f
install modprobe package,
...
check for modprobe
use apt and yum instead of package
Revert "use apt and yum instead of package"
This reverts commit 215a97b1867a7a8af5e0e64e9f77181d4c4a5050.
use latest to install kmod
run apt-get update
2017-08-07 14:56:42 +02:00
Sebastian Gumprich
77fae2a742
add passwd vars
2017-08-06 21:37:26 +02:00
Sebastian Gumprich
3d59e80910
Merge branch 'master' of github.com:dev-sec/ansible-os-hardening into passwd
2017-08-06 20:39:52 +02:00
Sebastian Gumprich
0fa457d967
update readme
2017-08-06 15:48:51 +02:00
Sebastian Gumprich
846e0c23b3
add kitchen to os_ignore_user to fix #124
2017-08-06 15:43:55 +02:00
Sebastian Gumprich
b737463b95
remove execshield on rhel7
2017-08-06 14:56:08 +02:00
Sebastian Gumprich
a957fb6245
style update
2017-08-04 22:23:12 +02:00
Sebastian Gumprich
9c77f82899
new task for delete netrc files
2017-08-04 21:55:59 +02:00
Sebastian Gumprich
0466917aaf
add shadow task
2017-08-04 21:51:16 +02:00
Sebastian Gumprich
bb85a92ff0
remove prelink, package-09
2017-08-04 21:45:33 +02:00
Sebastian Gumprich
e0e2b2a601
remove omit param in default()
2017-06-06 16:39:13 +02:00
Sebastian Gumprich
5c48c74f79
add more sysctl settings, allow overwriting
2017-05-07 15:12:31 +02:00
Sebastian Gumprich
83557bb057
update package
2017-04-22 20:50:29 +02:00
Sebastian Gumprich
0ab4db4228
omit empty variables
...
omit empty variables when in check-mode or when set_fact is skipped.
Fix #105
2017-03-01 21:17:41 +01:00
Sebastian Gumprich
334e203f8b
install initramfs-tools
...
These are not installed by default on debian 8 but needed for module generation.
see: https://github.com/dev-sec/ansible-os-hardening/issues/111
2017-03-01 21:17:23 +01:00
Sebastian Gumprich
1d48b0d10a
change shadow owner in debian systems
2017-03-01 20:58:19 +01:00
Sebastian Gumprich
dfc505634b
update min ansible version
2017-02-28 21:34:35 +01:00
Sebastian Gumprich
3af185ba8d
use new docker images
2017-01-22 16:05:45 +01:00
Sebastian Gumprich
5fc62a7f89
update changelog
2016-10-24 15:34:07 +02:00
Sebastian Gumprich
62a91011dd
add comments to variables
2016-10-24 14:11:43 +02:00
Sebastian Gumprich
11c81971e1
fix deprecation warning for undefined error. #99
2016-10-07 21:28:57 +02:00
Sebastian Gumprich
ef9d3d8f7f
update template
2016-09-27 19:18:17 +02:00
Sebastian Gumprich
723205f8f2
add rhel7 pam_pwquality. fix #73
2016-08-10 21:47:53 +02:00
Sebastian Gumprich
f7774d1503
push 3.1
2016-08-03 19:29:07 +02:00
Sebastian Gumprich
53b52bd0fa
skip sysctl in docker tests
2016-07-27 13:53:12 +02:00
Sebastian Gumprich
d7088cdeb6
remove thorfile, add sudo false, cleanup kitchen.yml
2016-07-26 17:59:07 +02:00
Sebastian Gumprich
e436ebe66e
Merge pull request #93 from conorsch/support-check-mode
...
Supports --check mode
2016-07-16 19:50:40 +02:00
Sebastian Gumprich
accdeecde4
Local testing with Docker
...
This PR changes the local testing method to docker by default, making
the tests significantly faster to execute.
2016-06-28 18:32:33 +02:00
Sebastian Gumprich
c5d9770f4a
change name of suite
2016-06-28 18:29:56 +02:00
Sebastian Gumprich
a6624db99d
initial docker testing support
2016-06-28 18:29:30 +02:00
Sebastian Gumprich
371ed47878
Merge pull request #91 from conorsch/support-centos7
...
Adds support for CentOS 7
2016-06-28 18:23:42 +02:00
Sebastian Gumprich
f059577d42
Merge pull request #88 from dev-sec/debian8
...
debian 8 support
2016-06-28 17:47:09 +02:00
Sebastian Gumprich
cda2d58218
Merge pull request #92 from vivekagr/patch-1
...
Fix a formatting issue in readme.
2016-06-26 21:18:21 +02:00
Sebastian Gumprich
422489f5ca
update meta file
2016-06-24 17:42:48 +02:00
Sebastian Gumprich
0999b7b1cf
update meta file
2016-06-24 17:36:26 +02:00
Sebastian Gumprich
cb54398e9c
Merge pull request #89 from conorsch/permit-filemap-config-on-etc-shadow
...
Permits overriding permissions on /etc/shadow
2016-06-13 19:17:27 +02:00
Sebastian Gumprich
1c81e9f146
debian 8 support
...
I implemented Debian 8 support (and removed debian 6 support, since its
EOL) as well as making it easier to locally test the role with inspec.
2016-06-08 17:31:47 +02:00
Sebastian Gumprich
b5f4bac9bd
update testing method
...
use default.yml in repo for testing
consolidate kitchen vars
2016-05-22 20:06:29 +02:00
Sebastian Gumprich
7746eca682
update readme for dev-sec, make vars a table
2016-05-22 18:18:21 +02:00
Sebastian Gumprich
80e2365687
Merge pull request #85 from fitz123/ufw_manage_defaults
...
Ufw manage defaults
2016-05-22 16:38:30 +02:00
Sebastian Gumprich
eaea10b3e7
Merge pull request #81 from fitz123/remove_ugly_red_errors
...
replace ignore_errors to failed_when to supress ugly error warnings
2016-05-19 20:43:16 +02:00
Sebastian Gumprich
87778593d0
Merge pull request #79 from fitz123/ansible_2.0-bare_vars_fix
...
fix bare variables usage for loops
2016-05-19 18:21:56 +02:00
Sebastian Gumprich
13ad1d2664
Merge pull request #75 from hardening-io/release
...
Release 3.0.0
2016-03-13 20:32:38 +01:00
Sebastian Gumprich
827af75e7d
release 3.0.0
2016-03-13 20:30:12 +01:00
Sebastian Gumprich
2d97a0872a
new release
2016-03-13 20:22:51 +01:00
Sebastian Gumprich
c3e9115f75
add webhook again
2016-03-05 21:25:08 +01:00
Sebastian Gumprich
ec8519e4ff
remove vagrantfile in kitchen.yml
2016-03-05 21:24:15 +01:00
Sebastian Gumprich
dfdf722979
add test support for ansible 1.9 and 2.0
2016-03-05 21:19:13 +01:00
Sebastian Gumprich
1b35de9644
Ansible 2.0 support
...
This role was tested with Ansible 2.0
2016-02-24 08:14:41 +01:00
Sebastian Gumprich
e9eac79851
remove vars-include line
2016-02-24 08:07:58 +01:00
Sebastian Gumprich
8747be1d0d
Move sysctl vars to defaults
2016-02-24 08:07:58 +01:00
Sebastian Gumprich
7d13247984
add webhook for ansible galaxy
...
This way the build status is shown on ansible-galaxy.
2016-02-24 07:54:48 +01:00
Sebastian Gumprich
5587a2343e
add debian 8 support.
2016-02-24 07:39:55 +01:00
Sebastian Gumprich
42d333d278
update platforms in meta-file
...
this way the match the style used by ansible galaxy.
2016-02-24 07:39:55 +01:00
Sebastian Gumprich
66f390f7e9
Merge pull request #66 from conorsch/update-include-tags
...
Updates "tags" parameters on includes in main.yml
2016-02-01 19:04:24 +01:00
Sebastian Gumprich