andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
361 Commits 14 Branches 64 Tags
b9acd71ececa2b33ee5357b020d4b042061d58e3
Commit Graph
361 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastian Gumprich b9acd71ece Merge pull request #199 from ccolic/master 
add /usr/bin/su to suid_guid whitelist
5.1.0 		2018-10-17 09:01:05 +02:00
Christian Colic 06dbfe4436 add /usr/bin/su to suid_guid whitelist 
Signed-off-by: Christian Colic <[email protected]>
 2018-10-16 12:47:59 +02:00
Sebastian Gumprich d90f894701 Merge pull request #197 from szEvEz/master 
ensure that permissions to su-binary are not restricted to root user and group only, if os_security_users_allow contains the value change_user
 2018-10-12 08:39:16 +02:00
John Szivós df13320c73 ensure that permissions to su-binary are not restricted to root user and group only, if os_security_users_allow contains the value change_user 2018-10-11 20:38:02 +02:00
Sebastian Gumprich e71fce9015 Update main.yml 2018-10-11 09:32:15 +02:00
Sebastian Gumprich a73df4c5f3 Merge pull request #196 from dev-sec/1804 
add ubuntu 1804 support
 2018-10-11 09:27:40 +02:00
Sebastian Gumprich af2d5222ab add 1804 vagrant support 2018-10-10 19:55:37 +02:00
Sebastian Gumprich 1b4a17f86e add ubunti 18.04 support 2018-10-10 19:35:44 +02:00
Sebastian Gumprich 7ecfbd932a Update issue templates 2018-10-06 18:54:17 +02:00
Sebastian Gumprich 590bc01769 Merge pull request #192 from dev-sec/auditd_disable 
add option to disable auditd
 2018-09-20 09:28:17 +02:00
Sebastian Gumprich 67f16f166c add option to disable auditd 2018-09-16 20:56:48 +02:00
Sebastian Gumprich cb05d55f9f update changelog 2018-09-02 19:48:49 +02:00
Sebastian Gumprich 2d4f4d2717 update changelog 5.0.0 2018-09-02 19:44:29 +02:00
Sebastian Gumprich 8f8623b86f Merge pull request #190 from dev-sec/fix_efi 
fix problems with efi and vfat
 2018-09-02 19:14:55 +02:00
Sebastian Gumprich 834059d18c fix problems with efi and vfat 2018-09-02 18:53:10 +02:00
Sebastian Gumprich 3da0d929b5 Merge pull request #189 from dev-sec/pwquality_amazon 
do not install passwdqc on amazon linux
 2018-09-02 16:21:33 +02:00
Sebastian Gumprich 1dc093597d do not install passwdqc on amz 2018-09-02 15:41:10 +02:00
Sebastian Gumprich b529c37b20 Merge pull request #182 from Normo/master 
Fix core dump config file creation when core dumps are disabled
 2018-08-23 14:26:26 +02:00
Norman Bestfleisch 8e11f12e05 Enable core dumps for testing 2018-08-23 13:16:56 +02:00
Norman Bestfleisch e0be00bcb8 Fix core dump config file creation when core dumps are disabled 2018-08-23 13:16:56 +02:00
Sebastian Gumprich 68ead9d1b0 Merge pull request #186 from BedrockSolutions/master 
added os_hardening_enabled flag
 2018-08-22 09:09:35 +02:00
Jay Cheroske 0476a5e45d added os_hardening_enabled flag 2018-08-21 22:35:27 -07:00
Sebastian Gumprich fd4ee1af03 Merge pull request #184 from dev-sec/kitchen_travis 
add back run opts for debian 8 in travis
 2018-08-15 16:53:25 +02:00
Sebastian Gumprich eb4fb325ae add back run opts 2018-08-15 16:10:41 +02:00
Sebastian Gumprich c69d62ae78 Merge pull request #183 from dev-sec/kitchen_travis 
add amazon run opts to travis
 2018-08-15 15:56:33 +02:00
Sebastian Gumprich eb6df69be9 remove oravle7 for the time being 2018-08-15 15:36:29 +02:00
Sebastian Gumprich 26a1a759a8 fix oracle tests 2018-08-15 15:31:16 +02:00
Sebastian Gumprich 356d6ddb9d add amazon run opts to travis 2018-08-15 15:13:59 +02:00
Sebastian Gumprich 30aa3fef3f Merge pull request #181 from dev-sec/minimize_access 
change minimize access method
 2018-08-01 21:34:55 +02:00
Sebastian Gumprich e439904fd0 update minimum ansible version 2018-08-01 21:08:16 +02:00
Sebastian Gumprich 9b056d09e1 change symlink testing 2018-07-31 21:19:03 +02:00
Sebastian Gumprich 81af4bd99c change minimize access method 2018-07-23 22:05:24 +02:00
Sebastian Gumprich c8657c827d Merge pull request #180 from dev-sec/package 
use package instead of yum and apt
 2018-07-09 21:50:02 +02:00
Sebastian Gumprich 7b405df16e use package instead of yum and apt 2018-07-09 21:45:02 +02:00
Sebastian Gumprich 11506cd5ce Add explanation to remival of pam_ccreds 2018-07-09 21:13:11 +02:00
Sebastian Gumprich 7af72c8d28 Merge pull request #178 from dev-sec/travis 
add oracle7 to travis
 2018-07-01 13:10:02 +02:00
Sebastian Gumprich aa9d52df07 add oracle7 to travis 2018-07-01 12:25:03 +02:00
Sebastian Gumprich 0d4287cf6b Revert "add package-08 check (audit) to travis" 
This reverts commit a3e9f1b4be.
 2018-06-29 21:59:22 +02:00
Sebastian Gumprich a3e9f1b4be add package-08 check (audit) to travis 2018-06-29 21:03:08 +02:00
Sebastian Gumprich bd5948baad Merge pull request #176 from dev-sec/pam_perms 
fix wrong permissions passwdqc #170
 2018-06-29 20:55:58 +02:00
Sebastian Gumprich 44b32922ff Merge pull request #144 from dev-sec/auditd 
install and configure auditd - fix inspec package-08
 2018-06-29 20:55:39 +02:00
Sebastian Gumprich 7962be63c2 remove always failing check from travis 2018-06-29 20:25:42 +02:00
Sebastian Gumprich b7c6bfe036 fix wrong permissions passwdqc #170 2018-06-29 20:14:23 +02:00
Sebastian Gumprich 2c538c874d change auditd option max_log_file_action 2018-06-29 20:09:01 +02:00
Sebastian Gumprich 853df23b46 Merge branch 'master' of github.com:dev-sec/ansible-os-hardening into auditd 2018-06-29 19:44:23 +02:00
Sebastian Gumprich f440803429 Merge pull request #174 from carchrae/example-comment-fix 
ipv4 forwarding comment is inconsistent with example
 2018-06-16 19:18:48 +02:00
Tom Carchrae b215e4f6ba comment is wrong/misleading 2018-06-08 08:27:32 -07:00
Sebastian Gumprich 0794a1227d Merge pull request #172 from martinbydefault/patch-1 
Rename pam_passwdqd.j2 to pam_passwdqc.j2
 2018-05-15 09:59:17 +02:00
Martin 3acbf7ab8a Rename pam_passwdqd.j2 to pam_passwdqc.j2 2018-05-14 22:27:16 -03:00
Sebastian Gumprich 60c26e3b47 Update README.md 2018-04-29 12:48:21 +02:00