ansible-collection-hardening

5 Commits

Include renames

Author	SHA1	Message	Date
Sebastian Gumprich	f56d80b5d8	Replace ssh_keys group in Fedora with root (#677 ) * Replace ssh_keys group in Fedora with root In Fedora 38, the `ssh_keys` group was removed. root is used now, in accordance to upstream. See: https://www.spinics.net/lists/fedora-devel/msg307707.html See: https://src.fedoraproject.org/rpms/openssh/pull-request/37# Signed-off-by: Sebastian Gumprich <[email protected]> * change host key mode and owner in fedora and rhel9 Signed-off-by: Sebastian Gumprich <[email protected]> * add missing host mode for rhel7 Signed-off-by: Sebastian Gumprich <[email protected]> * harden all ssh host keys Signed-off-by: Sebastian Gumprich <[email protected]> * skip linting rule Signed-off-by: Sebastian Gumprich <[email protected]> * correct grp for bsd is wheel Signed-off-by: Sebastian Gumprich <[email protected]> --------- Signed-off-by: Sebastian Gumprich <[email protected]>	2023-06-10 08:04:04 +02:00
Sebastian Gumprich	bb588bd777	linting (#603 ) * linting Signed-off-by: Sebastian Gumprich <[email protected]> * more linting Signed-off-by: Sebastian Gumprich <[email protected]> * change line length issues Signed-off-by: Sebastian Gumprich <[email protected]> * replace yes with true in tasks Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * add exception for task Signed-off-by: Sebastian Gumprich <[email protected]> * remove trailing whitespace * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back tasks Signed-off-by: Sebastian Gumprich <[email protected]>	2023-01-24 12:40:27 +01:00
Sina Tak Tehrani	ef31838fa2	Regenerate RSA key with size 4096 bits (#376 ) * regenerate RSA key with size 4096 bits Signed-off-by: Sina Tak Tehrani <[email protected]> * fixed lint problem Signed-off-by: Sina Tak Tehrani <[email protected]> * fixed E301 lint error Signed-off-by: Sina Tak Tehrani <[email protected]> * added host keys related vars Signed-off-by: Sina Tak Tehrani <[email protected]> * used openssh_keypair module Signed-off-by: Sina Tak Tehrani <[email protected]> * changed RSA private key mode to 0640 Signed-off-by: Sina Tak Tehrani <[email protected]> * specified condition to prevent wrong file mode on debian-based OS Signed-off-by: Sina Tak Tehrani <[email protected]>	2021-01-21 13:38:48 +01:00
schurziandSebastian Gumprich	a75e2c028b	change inclusion of os specific defaults (#353 ) * change inclusion of os specific defaults we now include the os specific options into a separate variable and merge this with the default ansible namespace, when the corresponding keys do not already exist (eg. are defined by default oder by user) Signed-off-by: Martin Schurz <[email protected]> * simplify check for os specific variables Signed-off-by: Martin Schurz <[email protected]> * add test for variable override Signed-off-by: Martin Schurz <[email protected]> * move tests to verify stage Signed-off-by: Martin Schurz <[email protected]> * correct grep Signed-off-by: Martin Schurz <[email protected]> * linting Signed-off-by: Martin Schurz <[email protected]> * fix typo Signed-off-by: Martin Schurz <[email protected]> * Revert "Merge pull request #351 from sprat/fix-umask" This reverts commit `9e8e0bc8fb`, reversing changes made to `98c7553016`. Signed-off-by: Martin Schurz <[email protected]> * move immutable ssh vars to internal vars Signed-off-by: Martin Schurz <[email protected]> * move vars to OS files Signed-off-by: Martin Schurz <[email protected]> * change default handling for all roles Signed-off-by: Martin Schurz <[email protected]> * fix issues Signed-off-by: Martin Schurz <[email protected]> * add documentation Signed-off-by: Martin Schurz <[email protected]> * Update main.yml Co-authored-by: Sebastian Gumprich <[email protected]>	2020-12-20 20:46:57 +01:00
Sebastian Gumprich	a46642ee92	merge ssh-hardening role into collection	2020-11-07 21:46:45 +01:00