andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,375 Commits 14 Branches 64 Tags
c94d973527718d0bf6ac00ff1fc244dbb7e082aa
Commit Graph
1375 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
schurziandSebastian Gumprich c954b8af8f Improve Documentation (#315) 
* improve formatting

Signed-off-by: Martin Schurz <[email protected]>

* add limitation for vm.mmap_rnd_bits to documentation

Signed-off-by: Martin Schurz <[email protected]>

* Apply suggestions from code review

Co-authored-by: Sebastian Gumprich <[email protected]>
Signed-off-by: Martin Schurz <[email protected]>

Co-authored-by: Sebastian Gumprich <[email protected]>
 2020-10-02 20:48:18 +02:00
dev-sec CI ac097014df update changelog 2020-10-02 18:46:29 +00:00
schurzi 9394688158 use touch for 10.hardcore.conf to avoid problems with dry-run (#314) 
Signed-off-by: Martin Schurz <[email protected]>
 2020-10-02 20:43:35 +02:00
dev-sec CI f3edc579f1 update changelog 2020-09-21 05:36:12 +00:00
Sebastian Gumprich 2f9febef4e Merge pull request #51 from dev-sec/modesagain 
add mode to copy task
 2020-09-21 07:34:27 +02:00
Sebastian Gumprich f2a8172593 add mode to copy task 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-09-20 22:00:30 +02:00
dev-sec CI 05d9551dfa update changelog 2020-09-20 12:30:06 +00:00
Sebastian Gumprich ab0e5783b9 use touch with no date changes (#310) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-09-20 14:27:09 +02:00
dev-sec CI 6eb48877a5 update changelog 2020-09-19 13:06:06 +00:00
Sebastian Gumprich bfc80e8cfd Merge pull request #50 from dev-sec/modes 
add modes to template and file tasks
 2020-09-19 15:04:15 +02:00
Sebastian Gumprich 17f214074f add modes to template and file tasks 
also use sane defaults for these modes: no permissions for other

Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-09-19 14:46:19 +02:00
dev-sec CI 30c282ef5d update changelog 2020-09-19 12:39:44 +00:00
Sebastian Gumprich 5c91da696a do not touch sysctl file to avoid idempotency problems (#309) 2020-09-19 14:36:57 +02:00
schurzi e266decde8 use ansible dhparam module (#32) 
* use ansible dhparam module
 2020-08-28 12:35:52 +02:00
schurzi 57f7a15b51 imove chmod to end because of generated files (#31) 
Signed-off-by: Martin Schurz <[email protected]>
 2020-08-24 11:22:33 +02:00
dev-sec CI 29a43568e6 update changelog 2020-08-24 08:46:44 +00:00
schurzi 3028b5ddc7 fix linting issues (#30) 
* fix linting issues

Signed-off-by: Martin Schurz <[email protected]>

* set file permissions

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-24 10:45:13 +02:00
dev-sec CI 25623b0d0b update changelog 2020-08-23 16:43:49 +00:00
schurzi c69e7efb11 Merge pull request #49 from dev-sec/collection 
Fix linting errors and simplivy vars-handling
 2020-08-23 18:42:09 +02:00
Sebastian Gumprich 3b059d4c7c simplify vars-handling 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-23 13:56:44 +02:00
Sebastian Gumprich 0757a3d1c3 fix linting errors 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-23 13:21:46 +02:00
dev-sec CI 30d5641e9b update changelog 2020-08-22 16:18:01 +00:00
schurzi a82e1a7a9f fix litner errors (#322) 
* fix litner errors

Signed-off-by: Martin Schurz <[email protected]>

* make linter more happy

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-22 18:14:54 +02:00
dev-sec CI 6b465f9cbb update changelog 2020-08-22 13:23:59 +00:00
schurzi b37c2ddb69 Merge pull request #303 from dev-sec/arch_support 
Arch support
 2020-08-22 15:21:18 +02:00
Sebastian Gumprich de5a7ce506 add archlinux support 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-22 14:08:08 +02:00
Andre Lehmann 77434b8a37 Make compatible with ArchLinux 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-08-22 13:39:44 +02:00
dev-sec CI a806a25af5 update changelog 2020-08-22 06:56:30 +00:00
schurzi 4ddbbb2a61 fix linting for molecule (#301) 
Signed-off-by: Martin Schurz <[email protected]>
 2020-08-22 08:53:44 +02:00
dev-sec CI 17570fda66 update changelog 2020-08-18 22:08:28 +00:00
schurzi 989f7b0e1e Merge pull request #300 from danielkubat/master 
define file permissions explicitly
 2020-08-19 00:05:51 +02:00
danielkubat fd10d8e8d2 single quotes added to follow role formatting 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 23:50:46 +02:00
danielkubat 34abe1ab03 mode defined in octal form 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 22:50:10 +02:00
danielkubat 2a75fc11d3 permissions explicitly defined 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 22:38:08 +02:00
dev-sec CI 6f0181b2fc update changelog 2020-08-17 10:17:48 +00:00
Daniel Kubat 7077187a67 replace module parameter fixed (#297) 
Signed-off-by: danielkubat <[email protected]>
6.2.0 		2020-08-17 12:15:04 +02:00
dev-sec CI e698433939 update changelog 2020-08-16 18:19:59 +00:00
dev-sec CI 37ab009093 update changelog 2020-08-16 18:19:43 +00:00
schurzi 56f6cd0337 Merge pull request #296 from dev-sec/fedora 
fix fedora build
 2020-08-16 20:17:15 +02:00
schurzi aaece07fe0 Merge pull request #321 from dev-sec/fedora 
use systemd in fedora
 2020-08-16 20:16:53 +02:00
dev-sec CI 337c7dbbed update changelog 2020-08-16 08:06:54 +00:00
Daniel KubatandSebastian Gumprich 2c4505addd use find module instead of shell (#294) 
* use find module to find yum repos, regexp fixes

Signed-off-by: danielkubat <[email protected]>

* use loop instead of with_*

Signed-off-by: danielkubat <[email protected]>

* Update tasks/yum.yml

Co-authored-by: Sebastian Gumprich <[email protected]>
 2020-08-16 10:04:26 +02:00
Sebastian Gumprich 88fecc4f2e try to fix fedora build 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-16 09:53:11 +02:00
Sebastian Gumprich 0b38b85a0a install systemd in fedora 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-16 09:52:59 +02:00
dev-sec CI c777133050 update changelog 2020-08-13 09:48:20 +00:00
Alex Domoradov 29158e4285 Optimize and unify when clause (#295) 
Signed-off-by: Alex Domoradov <[email protected]>
 2020-08-13 11:45:44 +02:00
dev-sec CI 5cad140f7b update changelog 2020-08-09 15:04:56 +00:00
Sebastian Gumprich fa2cf790f8 Merge pull request #320 from dev-sec/pam 
add separate option for controlling motd via pam
 2020-08-09 17:02:02 +02:00
Martin Schurz 5cf53b215f add separate option for controlling motd via pam 
makes it possible to set different values for motd via sshd and pam.
Also create a backup file of pam configuration, to allow user to restore
the previous settings.

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-08 18:14:38 +02:00
dev-sec CI bbe5ad4707 update changelog 2020-08-07 18:06:25 +00:00