Shizzlebix
cb85a99e22
adding switch for ForwardAgent in ssh_config ( #818 )
...
* Update openssh.conf.j2
add switch for FowardAgent
* Update openssh.conf.j2
fix typo
* Update openssh.conf.j2
change ssh_ForwardAgent to ssh_forward_agent
* Update argument_specs.yml
adding context for ssh_forward_agent
2024-11-11 19:52:38 +01:00
dev-sec CI
96d318eaf4
update changelog
2024-11-06 19:20:39 +00:00
dependabot[bot]
5b28117d72
Bump ansible-core from 2.17.5 to 2.17.6 ( #820 )
...
Bumps [ansible-core](https://github.com/ansible/ansible ) from 2.17.5 to 2.17.6.
- [Release notes](https://github.com/ansible/ansible/releases )
- [Commits](https://github.com/ansible/ansible/compare/v2.17.5...v2.17.6 )
---
updated-dependencies:
- dependency-name: ansible-core
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2024-11-06 20:08:54 +01:00
dev-sec CI
8d9569cd71
update galaxy.yml with new version
2024-10-22 08:25:58 +00:00
dev-sec CI
259aa71946
update changelog
2024-10-22 08:24:08 +00:00
dev-sec CI
5015cda4f0
update nginx_hardening readme
2024-10-22 07:18:55 +00:00
dev-sec CI
532b7a70ea
update ssh_hardening readme
2024-10-22 07:18:52 +00:00
dev-sec CI
8d336bcdfa
update os_hardening readme
2024-10-22 07:18:45 +00:00
dev-sec CI
8fffcde096
update mysql_hardening readme
2024-10-22 07:18:42 +00:00
dev-sec CI
37785016d9
update changelog
2024-10-22 06:54:58 +00:00
schurzi
5d95dc7083
Merge pull request #810 from dev-sec/audit_name
...
Add variable to set name_format for auditd
2024-10-22 08:47:36 +02:00
Martin Schurz
f70a74f99f
Add variable to set name_format for auditd
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-22 08:46:23 +02:00
schurzi
b6d11a0b19
Merge pull request #811 from dev-sec/py_version
...
Pin python dependencies and optimize GitHub Actions
2024-10-22 08:45:40 +02:00
Martin Schurz
92995bbee3
Sort matrix builds
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-22 08:44:39 +02:00
Martin Schurz
752a541507
Fix copy&paste error
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-21 20:06:14 +02:00
Martin Schurz
45193e9ff1
Pin python dependencies and optimize GitHub Actions
...
Signed-off-by: Martin Schurz <[email protected]
2024-10-21 20:01:14 +02:00
dev-sec CI
7dab72c8c1
update changelog
2024-10-13 19:43:46 +00:00
rndmh3ro
8619b26b75
Prettified Code!
2024-10-13 19:42:40 +00:00
Sebastian Gumprich
7b112dcf87
feat(ssh): add alpine support ( #809 )
...
Signed-off-by: Sebastian Gumprich <[email protected]
2024-10-13 21:42:28 +02:00
dev-sec CI
cd9cf8f22a
update changelog
2024-10-13 18:27:14 +00:00
dev-sec CI
08dfeedbc0
update os_hardening readme
2024-10-13 18:15:50 +00:00
dev-sec CI
759b746429
update ssh_hardening readme
2024-10-13 18:15:43 +00:00
dev-sec CI
e6ea4f0b4c
update mysql_hardening readme
2024-10-13 18:15:40 +00:00
dev-sec CI
94f05a971a
update changelog
2024-10-13 18:14:26 +00:00
Sebastian Gumprich
aa737011e4
fix(cicd): test idempotence on ssh custom tests ( #807 )
...
Signed-off-by: Sebastian Gumprich <[email protected]
2024-10-13 20:12:21 +02:00
dev-sec CI
19ac284200
update nginx_hardening readme
2024-10-13 18:12:08 +00:00
Sebastian Gumprich
141efbc516
fix(ssh_hardening): test setting kex to false, remove wrong default ( #808 )
...
Signed-off-by: Sebastian Gumprich <[email protected]
2024-10-13 20:11:47 +02:00
dev-sec CI
7cca65bc90
update changelog
2024-10-13 10:37:24 +00:00
rndmh3ro
cfd4536868
Prettified Code!
2024-10-13 10:35:08 +00:00
seven-beep
a97a54dc30
Provide granular noop for ssh configuration ( #789 )
...
* Provide granular noop for shh configuration
We would like to have more fine grained options on applying or not specific configurations.
This commit let the user choose to noop some configuration with a few new
boolean variables.
Motivation for theses options are we may configure ourselves some (ssh host key
regeneration in a templating system) or we are not ready for others (ssh_kex
will break dist-upgrades, letting the operator without ssh).
Signed-off-by: seven beep <[email protected] [email protected] [email protected]
2024-10-13 12:34:52 +02:00
dev-sec CI
a1c7e77f08
update changelog
2024-10-10 11:41:18 +00:00
dev-sec CI
be5a98bce5
update mysql_hardening readme
2024-10-10 11:39:07 +00:00
dev-sec CI
1464ee7693
update nginx_hardening readme
2024-10-10 11:39:01 +00:00
dev-sec CI
ba1991b4c1
update os_hardening readme
2024-10-10 11:39:00 +00:00
dev-sec CI
a234d23d77
update ssh_hardening readme
2024-10-10 11:38:59 +00:00
schurzi
3923ea888b
Merge pull request #806 from vmpr/patch-2
...
Document correct quotes for ssh_permit_tunnel parameter
2024-10-10 13:38:39 +02:00
vmpr
27aa081889
fixing missing quotes for ssh_permit_tunnel parameter in argument_specs.yml
...
ssh_permit_tunnel needs quotes otherwise we will end up with an error:
```
TASK [devsec.hardening.ssh_hardening : Create sshd_config and set permissions to root/600] **********************************************************************************************************************
fatal: [vampdock02]: FAILED! => {"changed": false, "checksum": "fe6b74e30b1a653f83c2cbe1dd1332c14bd55833", "exit_status": 255, "msg": "failed to validate", "stderr": "/home/debian/.ansible/tmp/ansible-tmp-1728530891.493071-72386-149151737175948/source line 123: bad PermitTunnel argument True\r\n", "stderr_lines": ["/home/debian/.ansible/tmp/ansible-tmp-1728530891.493071-72386-149151737175948/source line 123: bad PermitTunnel argument True"], "stdout": "", "stdout_lines": []}
```
2024-10-10 15:50:17 +08:00
dev-sec CI
ee727ed9b2
update changelog
2024-10-09 12:42:51 +00:00
rndmh3ro
d6d2624e4d
Prettified Code!
2024-10-09 12:40:26 +00:00
Sebastian Gumprich
62947a6ea2
fix(docs): add 'become: true' to example playbooks. fix #787 ( #804 )
...
Signed-off-by: Sebastian Gumprich <[email protected]
2024-10-09 14:40:08 +02:00
dev-sec CI
6ff5cebeb3
update changelog
2024-10-08 22:03:42 +00:00
schurzi
421d502f90
Merge pull request #802 from dev-sec/renovate/ansible-core-2.x
...
chore(deps): update dependency ansible-core to v2.17.5
2024-10-09 00:01:03 +02:00
renovate[bot]
d51f784244
chore(deps): update dependency ansible-core to v2.17.5
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-08 13:22:40 +00:00
dev-sec CI
fdcfd05a4c
update changelog
2024-10-08 11:28:54 +00:00
schurzi
f5303344e4
Merge pull request #800 from dev-sec/renovate/actions-checkout-digest
...
chore(deps): update actions/checkout digest to eef6144
2024-10-08 13:27:16 +02:00
schurzi
9476dc9130
Merge pull request #795 from dev-sec/renovate/ansible-ansible-lint-digest
...
chore(deps): update ansible/ansible-lint digest to 3b5bee1
2024-10-08 13:26:49 +02:00
dev-sec CI
f445c29f26
update changelog
2024-10-08 07:32:10 +00:00
schurzi
2f93835a6f
Merge pull request #801 from dev-sec/guard_molecule
...
Don't run tests if the environment is not correct
2024-10-08 09:29:29 +02:00
dev-sec CI
f380343a9d
update changelog
2024-10-08 06:32:35 +00:00
T.O.
9c069ff8e8
feat: ✨ Corrected package name ( #799 )
...
`policycoreutils-python` does not exist and was corrected to
`policycoreutils-python-utils`. Only tested with debian
2024-10-08 08:29:52 +02:00
Shizzlebix