andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
361 Commits 14 Branches 64 Tags
b9acd71ececa2b33ee5357b020d4b042061d58e3
Commit Graph
66 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastian Gumprich b9acd71ece Merge pull request #199 from ccolic/master 
add /usr/bin/su to suid_guid whitelist
 2018-10-17 09:01:05 +02:00
Sebastian Gumprich d90f894701 Merge pull request #197 from szEvEz/master 
ensure that permissions to su-binary are not restricted to root user and group only, if os_security_users_allow contains the value change_user
 2018-10-12 08:39:16 +02:00
Sebastian Gumprich e71fce9015 Update main.yml 2018-10-11 09:32:15 +02:00
Sebastian Gumprich a73df4c5f3 Merge pull request #196 from dev-sec/1804 
add ubuntu 1804 support
 2018-10-11 09:27:40 +02:00
Sebastian Gumprich 7ecfbd932a Update issue templates 2018-10-06 18:54:17 +02:00
Sebastian Gumprich 590bc01769 Merge pull request #192 from dev-sec/auditd_disable 
add option to disable auditd
 2018-09-20 09:28:17 +02:00
Sebastian Gumprich 8f8623b86f Merge pull request #190 from dev-sec/fix_efi 
fix problems with efi and vfat
 2018-09-02 19:14:55 +02:00
Sebastian Gumprich 3da0d929b5 Merge pull request #189 from dev-sec/pwquality_amazon 
do not install passwdqc on amazon linux
 2018-09-02 16:21:33 +02:00
Sebastian Gumprich b529c37b20 Merge pull request #182 from Normo/master 
Fix core dump config file creation when core dumps are disabled
 2018-08-23 14:26:26 +02:00
Sebastian Gumprich 68ead9d1b0 Merge pull request #186 from BedrockSolutions/master 
added os_hardening_enabled flag
 2018-08-22 09:09:35 +02:00
Sebastian Gumprich fd4ee1af03 Merge pull request #184 from dev-sec/kitchen_travis 
add back run opts for debian 8 in travis
 2018-08-15 16:53:25 +02:00
Sebastian Gumprich c69d62ae78 Merge pull request #183 from dev-sec/kitchen_travis 
add amazon run opts to travis
 2018-08-15 15:56:33 +02:00
Sebastian Gumprich 30aa3fef3f Merge pull request #181 from dev-sec/minimize_access 
change minimize access method
 2018-08-01 21:34:55 +02:00
Sebastian Gumprich c8657c827d Merge pull request #180 from dev-sec/package 
use package instead of yum and apt
 2018-07-09 21:50:02 +02:00
Sebastian Gumprich 11506cd5ce Add explanation to remival of pam_ccreds 2018-07-09 21:13:11 +02:00
Sebastian Gumprich 7af72c8d28 Merge pull request #178 from dev-sec/travis 
add oracle7 to travis
 2018-07-01 13:10:02 +02:00
Sebastian Gumprich bd5948baad Merge pull request #176 from dev-sec/pam_perms 
fix wrong permissions passwdqc #170
 2018-06-29 20:55:58 +02:00
Sebastian Gumprich 44b32922ff Merge pull request #144 from dev-sec/auditd 
install and configure auditd - fix inspec package-08
 2018-06-29 20:55:39 +02:00
Sebastian Gumprich f440803429 Merge pull request #174 from carchrae/example-comment-fix 
ipv4 forwarding comment is inconsistent with example
 2018-06-16 19:18:48 +02:00
Sebastian Gumprich 0794a1227d Merge pull request #172 from martinbydefault/patch-1 
Rename pam_passwdqd.j2 to pam_passwdqc.j2
 2018-05-15 09:59:17 +02:00
Sebastian Gumprich 60c26e3b47 Update README.md 2018-04-29 12:48:21 +02:00
Sebastian Gumprich a002e5e6c9 Update README.md 2018-04-29 12:46:52 +02:00
Sebastian Gumprich 788b12b188 Merge pull request #160 from dev-sec/amazon 
add amazon linux testing
 2018-04-16 15:41:57 +02:00
Sebastian Gumprich a4e383795f Update README.md 2018-04-09 21:31:44 +02:00
Sebastian Gumprich 84d20634d1 Merge pull request #168 from Normo/package-state 
Use package state 'present' since 'installed' is deprecated
 2018-03-26 10:01:49 +02:00
Sebastian Gumprich 1159eb5f00 Update README.md 2018-03-15 15:59:42 +01:00
Sebastian Gumprich 79aaab36b6 Update README.md 2018-03-15 15:59:21 +01:00
Sebastian Gumprich aa0036a1c1 Update README.md 2018-03-14 17:19:26 +01:00
Sebastian Gumprich 81ba398bb1 Merge pull request #132 from HelioCampos/master 
Remove deprecated include for static tasks and use instead import_tasks fix #131
 2018-01-31 20:04:18 +01:00
Sebastian Gumprich a04c2c034c Merge branch 'master' into master 2018-01-31 19:47:10 +01:00
Sebastian Gumprich 0b0af3966d Merge pull request #161 from thomasjpfan/ansible2.4 
Update syntax to Ansible 2.4
 2018-01-25 09:00:03 +01:00
Sebastian Gumprich 7daabdc2db Merge pull request #158 from woneill/amazon_linux 
Add support for Amazon Linux
 2018-01-15 18:11:54 +01:00
Sebastian Gumprich c310e15d14 Merge pull request #146 from martinbydefault/master 
Removal of core dump hardening configuration if core dumps are allowed
 2017-12-23 18:34:26 +01:00
Sebastian Gumprich 24fd32ba84 Merge pull request #150 from kravietz/master 
Add kernel hardening settings from Ubuntu /etc/sysctl.d
 2017-12-23 15:46:11 +01:00
Sebastian Gumprich a1727e24e4 Merge pull request #139 from dev-sec/fix_124 
update readme
 2017-12-23 15:35:34 +01:00
Sebastian Gumprich ac50457d39 Merge pull request #153 from pinguinkiste/fs-whitelist 
Prevent disabling of filesystems via whitelist
 2017-12-23 15:24:22 +01:00
Sebastian Gumprich 743d2c871e Merge pull request #156 from oakey-b1/oakey-b1-patch-1 
Don't create home for system accounts
 2017-12-07 19:16:44 +01:00
Sebastian Gumprich 9df7355d5c Merge branch 'master' into master 2017-10-23 07:33:22 +02:00
Sebastian Gumprich 0ddb26a7f7 Merge pull request #149 from martinbydefault/patch-1 
fixed tag
 2017-10-20 18:21:56 +02:00
Sebastian Gumprich 7438e0440a Merge branch 'master' into master 2017-10-05 20:47:18 +02:00
Sebastian Gumprich 49d380f00c Merge pull request #138 from dev-sec/modprobe 
add modprobe template, control os-10
 2017-08-08 08:32:47 +02:00
Sebastian Gumprich cfda4f79ac Update RedHat-6.yml 2017-08-07 22:11:33 +02:00
Sebastian Gumprich d33b8f1c40 fix typo 2017-08-07 22:08:03 +02:00
Sebastian Gumprich 637890223e Merge branch 'master' into modprobe 2017-08-07 22:01:38 +02:00
Sebastian Gumprich e1395fb2f2 Update minimize_access.yml 2017-08-07 21:55:30 +02:00
Sebastian Gumprich 9fa496f91d Merge pull request #119 from dev-sec/exec_shield 
remove execshield sysctl-parameter on rhel7
 2017-08-07 21:46:42 +02:00
Sebastian Gumprich 653c5cbf79 Merge branch 'master' into exec_shield 2017-08-07 19:33:50 +02:00
Sebastian Gumprich 02a475a465 Merge pull request #142 from duk3luk3/fix/no-blacklist-rsync 
Remove rsync from package blacklist
 2017-08-07 18:51:30 +02:00
Sebastian Gumprich a88ff85ec0 Merge pull request #136 from dev-sec/passwd 
add passwd task, control os-03
 2017-08-07 13:08:50 +02:00
Sebastian Gumprich 8bbd6f0f52 Update minimize_access.yml 2017-08-06 22:12:26 +02:00
Sebastian Gumprich f1df3a3c48 Merge pull request #134 from dev-sec/style 
style update
 2017-08-06 14:52:08 +02:00
Sebastian Gumprich 0aa330a35f Merge pull request #135 from dev-sec/prelinkt 
remove prelink package, control package-09
 2017-08-06 14:52:02 +02:00
Sebastian Gumprich a461deffff Merge branch 'master' into style 2017-08-05 21:46:58 +02:00
Sebastian Gumprich 09bcc0baad Merge pull request #137 from dev-sec/netrc 
new task for delete netrc files, control os-09
 2017-08-05 21:05:04 +02:00
Sebastian Gumprich 129f1a2314 Merge pull request #130 from fazlearefin/master 
Fix ansible.cfg and use comment filter
 2017-07-17 21:05:39 +02:00
Sebastian Gumprich 6d21d249b9 Merge pull request #120 from dev-sec/combined_sysctl 
add more sysctl settings, allow overwriting
 2017-06-27 20:59:04 +02:00
Sebastian Gumprich 8f6d3b1800 use with_flattened and default lists 2017-06-27 12:10:32 +02:00
Sebastian Gumprich 7bbd479a9a Update README.md 2017-05-28 18:31:10 +02:00
Sebastian Gumprich 24baf2c126 Merge pull request #126 from pestaa/patch-1 
Converts set to JSON-serializable list
 2017-05-07 13:25:11 +02:00
Sebastian Gumprich 7fdd7b4bb8 Merge pull request #106 from dev-sec/skip_fail 
omit empty variables
 2017-03-14 18:32:22 +01:00
Sebastian Gumprich 7f1415f339 Merge pull request #114 from dev-sec/fix_111 
install initramfs-tools
 2017-03-14 18:32:16 +01:00
Sebastian Gumprich a9095928ac Merge pull request #117 from dev-sec/shadow_owner 
change shadow owner in debian systems
 2017-03-01 21:15:47 +01:00
Sebastian Gumprich 987a3331f0 Merge pull request #110 from dev-sec/docker 
use new Docker images
 2017-03-01 20:31:08 +01:00
Sebastian Gumprich 0779022a6e Merge pull request #113 from tyrken/rhel7 
Rhel7
 2017-01-20 16:42:00 +01:00
Sebastian Gumprich a8f8cd083a Update README.md 2017-01-09 07:24:57 +01:00
Sebastian Gumprich 1e57cb64a2 Merge pull request #104 from ypid/fix/role_description 
Don’t refer to this role as "playbook" in the role description
 2016-12-03 18:33:47 +01:00