ansible-collection-hardening

8 Commits

Include renames

Author	SHA1	Message	Date
Sebastian Gumprich	f56d80b5d8	Replace ssh_keys group in Fedora with root (#677 ) * Replace ssh_keys group in Fedora with root In Fedora 38, the `ssh_keys` group was removed. root is used now, in accordance to upstream. See: https://www.spinics.net/lists/fedora-devel/msg307707.html See: https://src.fedoraproject.org/rpms/openssh/pull-request/37# Signed-off-by: Sebastian Gumprich <[email protected]> * change host key mode and owner in fedora and rhel9 Signed-off-by: Sebastian Gumprich <[email protected]> * add missing host mode for rhel7 Signed-off-by: Sebastian Gumprich <[email protected]> * harden all ssh host keys Signed-off-by: Sebastian Gumprich <[email protected]> * skip linting rule Signed-off-by: Sebastian Gumprich <[email protected]> * correct grp for bsd is wheel Signed-off-by: Sebastian Gumprich <[email protected]> --------- Signed-off-by: Sebastian Gumprich <[email protected]>	2023-06-10 08:04:04 +02:00
Sebastian Gumprich	bb588bd777	linting (#603 ) * linting Signed-off-by: Sebastian Gumprich <[email protected]> * more linting Signed-off-by: Sebastian Gumprich <[email protected]> * change line length issues Signed-off-by: Sebastian Gumprich <[email protected]> * replace yes with true in tasks Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * add exception for task Signed-off-by: Sebastian Gumprich <[email protected]> * remove trailing whitespace * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back tasks Signed-off-by: Sebastian Gumprich <[email protected]>	2023-01-24 12:40:27 +01:00
Sebastian Gumprich	72ec118a6d	add rocky linux 8 tests and make sure that all relevant tasks are execd (#457 ) * add rocky linux 8 tests and make sure that all relevant tasks are executed Signed-off-by: rndmh3ro <[email protected]> * fix missing quote Signed-off-by: rndmh3ro <[email protected]>	2021-06-30 13:09:12 +02:00
Farid Joubbi	7af432e1cf	Uppercased first letter of task names. (#422 ) Signed-off-by: Farid Joubbi <[email protected]>	2021-03-25 13:52:56 +01:00
Norman Ziegner	614662b99d	Add variable to specify host rsa key size (#394 ) Signed-off-by: Norman Ziegner <[email protected]>	2021-02-09 09:44:55 +01:00
schurzi	4b0819349d	use fqcn for community.crypto.openssh_keypair module (#389 ) tihis fixes a problem with Ansible 2.9 where the default openssh_keypair is not supporting every option we need Signed-off-by: Martin Schurz <[email protected]>	2021-02-05 19:44:23 +01:00
Sina Tak Tehrani	ef31838fa2	Regenerate RSA key with size 4096 bits (#376 ) * regenerate RSA key with size 4096 bits Signed-off-by: Sina Tak Tehrani <[email protected]> * fixed lint problem Signed-off-by: Sina Tak Tehrani <[email protected]> * fixed E301 lint error Signed-off-by: Sina Tak Tehrani <[email protected]> * added host keys related vars Signed-off-by: Sina Tak Tehrani <[email protected]> * used openssh_keypair module Signed-off-by: Sina Tak Tehrani <[email protected]> * changed RSA private key mode to 0640 Signed-off-by: Sina Tak Tehrani <[email protected]> * specified condition to prevent wrong file mode on debian-based OS Signed-off-by: Sina Tak Tehrani <[email protected]>	2021-01-21 13:38:48 +01:00
Sebastian Gumprich	a46642ee92	merge ssh-hardening role into collection	2020-11-07 21:46:45 +01:00