Sebastian Gumprich
d33b8f1c40
fix typo
2017-08-07 22:08:03 +02:00
Sebastian Gumprich
637890223e
Merge branch 'master' into modprobe
2017-08-07 22:01:38 +02:00
Sebastian Gumprich
fde065d31b
rebasing
2017-08-07 21:57:46 +02:00
Sebastian Gumprich
8f7c7ba84c
install modprobe package,
...
check for modprobe
use apt and yum instead of package
Revert "use apt and yum instead of package"
This reverts commit 215a97b1867a7a8af5e0e64e9f77181d4c4a5050.
use latest to install kmod
run apt-get update
2017-08-07 21:56:08 +02:00
Sebastian Gumprich
db517e9539
change vars file loading
2017-08-07 21:55:30 +02:00
Lukas Erlacher
3ccb3eb8de
Remove rsync from package blacklist
...
rsync was erroneously added to `os_security_packages_list` variable,
meaning it was uninstalled as a "package with known issues".
Fixes #141
2017-08-07 21:55:30 +02:00
Sebastian Gumprich
e1395fb2f2
Update minimize_access.yml
2017-08-07 21:55:30 +02:00
Sebastian Gumprich
e879831819
add passwd vars
2017-08-07 21:55:30 +02:00
Sebastian Gumprich
41feffdc17
add kitchen to os_ignore_user to fix #124
2017-08-07 21:53:56 +02:00
Sebastian Gumprich
ef1c718ba7
remove execshield on rhel7
2017-08-07 21:53:56 +02:00
Sebastian Gumprich
de6653d9bb
add shadow task
2017-08-07 21:53:37 +02:00
Sebastian Gumprich
9fa496f91d
Merge pull request #119 from dev-sec/exec_shield
...
remove execshield sysctl-parameter on rhel7
2017-08-07 21:46:42 +02:00
Sebastian Gumprich
1303e0c7fe
change vars file loading
2017-08-07 21:27:20 +02:00
Sebastian Gumprich
653c5cbf79
Merge branch 'master' into exec_shield
2017-08-07 19:33:50 +02:00
Sebastian Gumprich
02a475a465
Merge pull request #142 from duk3luk3/fix/no-blacklist-rsync
...
Remove rsync from package blacklist
2017-08-07 18:51:30 +02:00
Sebastian Gumprich
e01a478858
remove useless check
2017-08-07 18:48:34 +02:00
Lukas Erlacher
066f423aae
Remove rsync from package blacklist
...
rsync was erroneously added to `os_security_packages_list` variable,
meaning it was uninstalled as a "package with known issues".
Fixes #141
2017-08-07 23:21:51 +10:00
Sebastian Gumprich
cf3bbb3dd4
add conditional check
2017-08-07 15:08:12 +02:00
Sebastian Gumprich
62d20e299f
install modprobe package,
...
check for modprobe
use apt and yum instead of package
Revert "use apt and yum instead of package"
This reverts commit 215a97b1867a7a8af5e0e64e9f77181d4c4a5050.
use latest to install kmod
run apt-get update
2017-08-07 14:56:42 +02:00
Sebastian Gumprich
a88ff85ec0
Merge pull request #136 from dev-sec/passwd
...
add passwd task, control os-03
2017-08-07 13:08:50 +02:00
Sebastian Gumprich
8bbd6f0f52
Update minimize_access.yml
2017-08-06 22:12:26 +02:00
Sebastian Gumprich
77fae2a742
add passwd vars
2017-08-06 21:37:26 +02:00
Sebastian Gumprich
3d59e80910
Merge branch 'master' of github.com:dev-sec/ansible-os-hardening into passwd
2017-08-06 20:39:52 +02:00
Sebastian Gumprich
0fa457d967
update readme
2017-08-06 15:48:51 +02:00
Sebastian Gumprich
846e0c23b3
add kitchen to os_ignore_user to fix #124
2017-08-06 15:43:55 +02:00
Sebastian Gumprich
b737463b95
remove execshield on rhel7
2017-08-06 14:56:08 +02:00
Sebastian Gumprich
f1df3a3c48
Merge pull request #134 from dev-sec/style
...
style update
2017-08-06 14:52:08 +02:00
Sebastian Gumprich
0aa330a35f
Merge pull request #135 from dev-sec/prelinkt
...
remove prelink package, control package-09
2017-08-06 14:52:02 +02:00
Sebastian Gumprich
a1a1371a83
update readme
2017-08-05 21:58:29 +02:00
Sebastian Gumprich
a461deffff
Merge branch 'master' into style
2017-08-05 21:46:58 +02:00
Sebastian Gumprich
8df021d3b5
update spaces, bools, trues
2017-08-05 21:43:28 +02:00
Sebastian Gumprich
09bcc0baad
Merge pull request #137 from dev-sec/netrc
...
new task for delete netrc files, control os-09
2017-08-05 21:05:04 +02:00
Sebastian Gumprich
a957fb6245
style update
2017-08-04 22:23:12 +02:00
Sebastian Gumprich
9c77f82899
new task for delete netrc files
2017-08-04 21:55:59 +02:00
Sebastian Gumprich
0466917aaf
add shadow task
2017-08-04 21:51:16 +02:00
Sebastian Gumprich
bb85a92ff0
remove prelink, package-09
2017-08-04 21:45:33 +02:00
Sebastian Gumprich
129f1a2314
Merge pull request #130 from fazlearefin/master
...
Fix ansible.cfg and use comment filter
2017-07-17 21:05:39 +02:00
Helio Campos Mello de Andrade
407ed57077
Remove deprecated include for static tasks and use instead import_tasks
2017-07-14 07:36:08 -03:00
Fazle Arefin
6cbc26040f
Add comment filter to {{ansible_managed}} string
...
- multiline {{ansible_managed}} strings do not get properly commented
without the comment filter (see
http://docs.ansible.com/ansible/playbooks_filters.html#comment-filter )
2017-07-07 11:49:33 +10:00
Fazle Arefin
192046d4ac
Fix ansible.cfg
...
- using `%Y-%m-%d` in `ansible_managed` message is not recommended
as deploying from a new git checkout will change the `ansible_managed`
string in the template and Ansible will report the template file as changed
(see http://docs.ansible.com/ansible/intro_configuration.html#ansible-managed )
- add `scp_if_ssh` in ansible.cfg
2017-07-07 11:48:53 +10:00
Sebastian Gumprich
cb8f952a86
update changelog
2017-06-28 16:00:41 +02:00
Sebastian Gumprich
6d21d249b9
Merge pull request #120 from dev-sec/combined_sysctl
...
add more sysctl settings, allow overwriting
2017-06-27 20:59:04 +02:00
Sebastian Gumprich
0b8e42c5c6
remove 12.04 support
2017-06-27 15:03:22 +02:00
Sebastian Gumprich
8f6d3b1800
use with_flattened and default lists
2017-06-27 12:10:32 +02:00
Sebastian Gumprich
e0e2b2a601
remove omit param in default()
2017-06-06 16:39:13 +02:00
Sebastian Gumprich
7bbd479a9a
Update README.md
2017-05-28 18:31:10 +02:00
Sebastian Gumprich
5c48c74f79
add more sysctl settings, allow overwriting
2017-05-07 15:12:31 +02:00
Sebastian Gumprich
24baf2c126
Merge pull request #126 from pestaa/patch-1
...
Converts set to JSON-serializable list
2017-05-07 13:25:11 +02:00
Istvan Beregszaszi
402f9b508f
Converts set to JSON-serializable list
...
Fixes #125 .
2017-05-06 22:25:17 +02:00
Sebastian Gumprich
83557bb057
update package
2017-04-22 20:50:29 +02:00
Sebastian Gumprich