Farid Joubbi
7af432e1cf
Uppercased first letter of task names. ( #422 )
...
Signed-off-by: Farid Joubbi <[email protected]
2021-03-25 13:52:56 +01:00
Farid Joubbi
c90bbd2c23
Improved comments. ( #436 )
...
Signed-off-by: Farid Joubbi <[email protected]
2021-03-24 14:31:58 +01:00
Farid Joubbi
d1143a06b1
Not accepting source routing for IPv6. This was already done for IPv4. ( #424 )
...
Signed-off-by: Farid Joubbi <[email protected]
2021-03-24 07:55:29 +01:00
Farid Joubbi
240d8acc0c
Changed os_auth_pam_pwquality_options type to authtok_type.
...
Signed-off-by: Farid Joubbi <[email protected]
2021-03-23 11:16:05 +01:00
Farid Joubbi
659e5ada6a
Changed to pam_pwhistory.so instead of pam_unix.so for remembering old passwords.
...
Signed-off-by: Farid Joubbi <[email protected]
2021-03-22 22:28:25 +01:00
Farid Joubbi
0010715039
Remove comment from output file, but keep it in the template.
...
Signed-off-by: Farid Joubbi <[email protected]
2021-03-22 19:39:49 +01:00
Farid Joubbi
97c55d6e55
Documented rationale for sysctl values set.
...
Signed-off-by: Farid Joubbi <[email protected]
2021-03-15 14:01:19 +01:00
Farid Joubbi
4158e0bfb4
Created a list of files/dirs to be looped instead of two tasks per file/dir.
...
Signed-off-by: Farid Joubbi <[email protected]
2021-03-11 16:54:25 +01:00
Farid Joubbi
4bad4779cd
Fixed copy-paste error by doing og-rwx instead of numerical.
...
Signed-off-by: Farid Joubbi <[email protected]
2021-02-22 22:13:18 +01:00
Farid Joubbi
91a0d62305
Ensure permissions on /etc/crontab are configured. #375
...
Signed-off-by: Farid Joubbi <[email protected]
2021-02-19 23:19:00 +01:00
Farid Joubbi
60d24db460
Ensure permissions on /etc/crontab are configured. #375
...
Signed-off-by: Farid Joubbi <[email protected]
2021-02-19 22:40:16 +01:00
Farid Joubbi
254b62d980
Added comment on top of template about which role modified the resulting file. https://github.com/dev-sec/ansible-collection-hardening/issues/345
...
Signed-off-by: Farid Joubbi <[email protected]
2021-01-19 14:05:33 +01:00
Farid Joubbi
d01abb44c0
Syncookie ( #372 )
...
* Enabled SYN cookie sysctl.
Signed-off-by: Farid Joubbi <[email protected] [email protected]
2021-01-15 09:56:29 +01:00
Farid Joubbi
5675589e01
Sorted sysctl values and lists in READMEs alphabetically (No functional changes). ( #371 )
...
* Add s's for consistency.
Signed-off-by: Farid Joubbi <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2021-01-08 20:45:50 +01:00
Farid Joubbi
83e29b01f5
Removed Protocol statement in later versions of sshd, since the code … ( #342 )
...
* Removed Protocol statement in later versions of sshd, since the code for SSH-1 has been removed in sshd.
Signed-off-by: Farid Joubbi <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2020-12-16 19:29:33 +01:00
Farid Joubbi
91424ac209
Improvements of comments in opensshd.conf.j2 #338 ( #339 )
...
* Fixed some comments that had issues. See #338
* Cut some long comments into two rows for easier reading.
Signed-off-by: joubbi <[email protected]
2020-12-12 20:35:38 +01:00
Farid Joubbi