andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,518 Commits 14 Branches 64 Tags
b5ca78a9cd19c9a66103df4b2e853a6c60b4b7b7
Commit Graph
1518 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastian Gumprich ab0e5783b9 use touch with no date changes (#310) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-09-20 14:27:09 +02:00
dev-sec CI 6eb48877a5 update changelog 2020-09-19 13:06:06 +00:00
Sebastian Gumprich bfc80e8cfd Merge pull request #50 from dev-sec/modes 
add modes to template and file tasks
 2020-09-19 15:04:15 +02:00
Sebastian Gumprich 17f214074f add modes to template and file tasks 
also use sane defaults for these modes: no permissions for other

Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-09-19 14:46:19 +02:00
dev-sec CI 30c282ef5d update changelog 2020-09-19 12:39:44 +00:00
Sebastian Gumprich 5c91da696a do not touch sysctl file to avoid idempotency problems (#309) 2020-09-19 14:36:57 +02:00
schurzi e266decde8 use ansible dhparam module (#32) 
* use ansible dhparam module
 2020-08-28 12:35:52 +02:00
schurzi 57f7a15b51 imove chmod to end because of generated files (#31) 
Signed-off-by: Martin Schurz <[email protected]>
 2020-08-24 11:22:33 +02:00
dev-sec CI 29a43568e6 update changelog 2020-08-24 08:46:44 +00:00
schurzi 3028b5ddc7 fix linting issues (#30) 
* fix linting issues

Signed-off-by: Martin Schurz <[email protected]>

* set file permissions

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-24 10:45:13 +02:00
dev-sec CI 25623b0d0b update changelog 2020-08-23 16:43:49 +00:00
schurzi c69e7efb11 Merge pull request #49 from dev-sec/collection 
Fix linting errors and simplivy vars-handling
 2020-08-23 18:42:09 +02:00
Sebastian Gumprich 3b059d4c7c simplify vars-handling 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-23 13:56:44 +02:00
Sebastian Gumprich 0757a3d1c3 fix linting errors 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-23 13:21:46 +02:00
dev-sec CI 30d5641e9b update changelog 2020-08-22 16:18:01 +00:00
schurzi a82e1a7a9f fix litner errors (#322) 
* fix litner errors

Signed-off-by: Martin Schurz <[email protected]>

* make linter more happy

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-22 18:14:54 +02:00
dev-sec CI 6b465f9cbb update changelog 2020-08-22 13:23:59 +00:00
schurzi b37c2ddb69 Merge pull request #303 from dev-sec/arch_support 
Arch support
 2020-08-22 15:21:18 +02:00
Sebastian Gumprich de5a7ce506 add archlinux support 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-22 14:08:08 +02:00
Andre Lehmann 77434b8a37 Make compatible with ArchLinux 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-08-22 13:39:44 +02:00
dev-sec CI a806a25af5 update changelog 2020-08-22 06:56:30 +00:00
schurzi 4ddbbb2a61 fix linting for molecule (#301) 
Signed-off-by: Martin Schurz <[email protected]>
 2020-08-22 08:53:44 +02:00
dev-sec CI 17570fda66 update changelog 2020-08-18 22:08:28 +00:00
schurzi 989f7b0e1e Merge pull request #300 from danielkubat/master 
define file permissions explicitly
 2020-08-19 00:05:51 +02:00
danielkubat fd10d8e8d2 single quotes added to follow role formatting 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 23:50:46 +02:00
danielkubat 34abe1ab03 mode defined in octal form 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 22:50:10 +02:00
danielkubat 2a75fc11d3 permissions explicitly defined 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 22:38:08 +02:00
dev-sec CI 6f0181b2fc update changelog 2020-08-17 10:17:48 +00:00
Daniel Kubat 7077187a67 replace module parameter fixed (#297) 
Signed-off-by: danielkubat <[email protected]>
6.2.0 		2020-08-17 12:15:04 +02:00
dev-sec CI e698433939 update changelog 2020-08-16 18:19:59 +00:00
dev-sec CI 37ab009093 update changelog 2020-08-16 18:19:43 +00:00
schurzi 56f6cd0337 Merge pull request #296 from dev-sec/fedora 
fix fedora build
 2020-08-16 20:17:15 +02:00
schurzi aaece07fe0 Merge pull request #321 from dev-sec/fedora 
use systemd in fedora
 2020-08-16 20:16:53 +02:00
dev-sec CI 337c7dbbed update changelog 2020-08-16 08:06:54 +00:00
Daniel KubatandSebastian Gumprich 2c4505addd use find module instead of shell (#294) 
* use find module to find yum repos, regexp fixes

Signed-off-by: danielkubat <[email protected]>

* use loop instead of with_*

Signed-off-by: danielkubat <[email protected]>

* Update tasks/yum.yml

Co-authored-by: Sebastian Gumprich <[email protected]>
 2020-08-16 10:04:26 +02:00
Sebastian Gumprich 88fecc4f2e try to fix fedora build 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-16 09:53:11 +02:00
Sebastian Gumprich 0b38b85a0a install systemd in fedora 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-16 09:52:59 +02:00
dev-sec CI c777133050 update changelog 2020-08-13 09:48:20 +00:00
Alex Domoradov 29158e4285 Optimize and unify when clause (#295) 
Signed-off-by: Alex Domoradov <[email protected]>
 2020-08-13 11:45:44 +02:00
dev-sec CI 5cad140f7b update changelog 2020-08-09 15:04:56 +00:00
Sebastian Gumprich fa2cf790f8 Merge pull request #320 from dev-sec/pam 
add separate option for controlling motd via pam
 2020-08-09 17:02:02 +02:00
Martin Schurz 5cf53b215f add separate option for controlling motd via pam 
makes it possible to set different values for motd via sshd and pam.
Also create a backup file of pam configuration, to allow user to restore
the previous settings.

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-08 18:14:38 +02:00
dev-sec CI bbe5ad4707 update changelog 2020-08-07 18:06:25 +00:00
schurzi b3d7acee44 Merge pull request #48 from dev-sec/kitchen_travis 
update testing
 2020-08-07 20:04:50 +02:00
Sebastian Gumprich 6b42f12434 update testing 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-07 19:30:58 +02:00
dev-sec CI eb777fbe2f update changelog 2020-08-07 07:02:27 +00:00
schurzi eaeca04d96 do not blacklist used filesystems (#289) 
* add additional check for efi

some systems seem to require vfat because of efi, despite not exposing a
/sys/firmware/efi directory.

Signed-off-by: Martin Schurz <[email protected]>

* make linter happy

Signed-off-by: Martin Schurz <[email protected]>

* rework check to check for all used filesystems

so we don't break existing mounts with our configuration

Signed-off-by: Martin Schurz <[email protected]>

* do not check this on el6

Signed-off-by: Martin Schurz <[email protected]>

* add comment to clarify

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-07 08:59:46 +02:00
dev-sec CI 83a6d88c46 update changelog 2020-08-03 19:31:28 +00:00
Sebastian Gumprich 04d19fd195 fix typo 2020-08-03 21:28:23 +02:00
dev-sec CI fe7e37e6e9 update changelog 2020-08-03 13:58:20 +00:00