ansible-collection-hardening

0 Fork 0

Author	SHA1	Message	Date
Nejc Habjan	dd215ba310	feat: explicitly support Fedora 37 and 38 (#682 ) Signed-off-by: Nejc Habjan <[email protected]>	2023-06-12 14:18:32 +02:00
Sebastian Gumprich	f56d80b5d8	Replace ssh_keys group in Fedora with root (#677 ) * Replace ssh_keys group in Fedora with root In Fedora 38, the `ssh_keys` group was removed. root is used now, in accordance to upstream. See: https://www.spinics.net/lists/fedora-devel/msg307707.html See: https://src.fedoraproject.org/rpms/openssh/pull-request/37# Signed-off-by: Sebastian Gumprich <[email protected]> * change host key mode and owner in fedora and rhel9 Signed-off-by: Sebastian Gumprich <[email protected]> * add missing host mode for rhel7 Signed-off-by: Sebastian Gumprich <[email protected]> * harden all ssh host keys Signed-off-by: Sebastian Gumprich <[email protected]> * skip linting rule Signed-off-by: Sebastian Gumprich <[email protected]> * correct grp for bsd is wheel Signed-off-by: Sebastian Gumprich <[email protected]> --------- Signed-off-by: Sebastian Gumprich <[email protected]>	2023-06-10 08:04:04 +02:00
mmitnyan	83a0a9242b	Support for Amazon Linux 2 (#624 ) Signed-off-by: Manuel Mitnyan <[email protected]> Signed-off-by: Manuel Mitnyan <[email protected]>	2023-01-25 09:12:25 +01:00
Sebastian Gumprich	bb588bd777	linting (#603 ) * linting Signed-off-by: Sebastian Gumprich <[email protected]> * more linting Signed-off-by: Sebastian Gumprich <[email protected]> * change line length issues Signed-off-by: Sebastian Gumprich <[email protected]> * replace yes with true in tasks Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * add exception for task Signed-off-by: Sebastian Gumprich <[email protected]> * remove trailing whitespace * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back tasks Signed-off-by: Sebastian Gumprich <[email protected]>	2023-01-24 12:40:27 +01:00
Sebastian Gumprich	dac66f4a88	simplify OS-vars files Signed-off-by: Sebastian Gumprich <[email protected]>	2022-10-25 18:59:11 +02:00
Sebastian Gumprich	3b8b394f10	add ssh-vars for new OS Signed-off-by: Sebastian Gumprich <[email protected]>	2022-10-25 18:59:11 +02:00
Simon Baerlocher	883effef82	add centos >8 Support (#573 ) Signed-off-by: Simon Baerlocher <[email protected]> Signed-off-by: Simon Baerlocher <[email protected]>	2022-09-06 16:31:43 +02:00
Sebastian Gumprich	4ca4f09453	Cleanup old OS-support and simplify vars (#458 ) * use os_family instead of distribution for debian systems Signed-off-by: rndmh3ro <[email protected]> * remove tasks related to rhel6 or debian 6 Signed-off-by: rndmh3ro <[email protected]>	2021-06-30 13:09:46 +02:00
Sherwin Daganato	350b5891d1	Add support for Rocky Linux 8 (#454 ) Signed-off-by: Sherwin Daganato <[email protected]>	2021-06-30 10:12:07 +02:00
Benjamin	29ee683069	Fix ssh kex [email protected] for openssh >= 8.5 fix #433 Signed-off-by: Benjamin <[email protected]> Signed-off-by: Benjamin Boehm <[email protected]>	2021-04-01 02:08:24 +02:00
Sina Tak Tehrani	ef31838fa2	Regenerate RSA key with size 4096 bits (#376 ) * regenerate RSA key with size 4096 bits Signed-off-by: Sina Tak Tehrani <[email protected]> * fixed lint problem Signed-off-by: Sina Tak Tehrani <[email protected]> * fixed E301 lint error Signed-off-by: Sina Tak Tehrani <[email protected]> * added host keys related vars Signed-off-by: Sina Tak Tehrani <[email protected]> * used openssh_keypair module Signed-off-by: Sina Tak Tehrani <[email protected]> * changed RSA private key mode to 0640 Signed-off-by: Sina Tak Tehrani <[email protected]> * specified condition to prevent wrong file mode on debian-based OS Signed-off-by: Sina Tak Tehrani <[email protected]>	2021-01-21 13:38:48 +01:00
schurziandSebastian Gumprich	a75e2c028b	change inclusion of os specific defaults (#353 ) * change inclusion of os specific defaults we now include the os specific options into a separate variable and merge this with the default ansible namespace, when the corresponding keys do not already exist (eg. are defined by default oder by user) Signed-off-by: Martin Schurz <[email protected]> * simplify check for os specific variables Signed-off-by: Martin Schurz <[email protected]> * add test for variable override Signed-off-by: Martin Schurz <[email protected]> * move tests to verify stage Signed-off-by: Martin Schurz <[email protected]> * correct grep Signed-off-by: Martin Schurz <[email protected]> * linting Signed-off-by: Martin Schurz <[email protected]> * fix typo Signed-off-by: Martin Schurz <[email protected]> * Revert "Merge pull request #351 from sprat/fix-umask" This reverts commit `9e8e0bc8fb`, reversing changes made to `98c7553016`. Signed-off-by: Martin Schurz <[email protected]> * move immutable ssh vars to internal vars Signed-off-by: Martin Schurz <[email protected]> * move vars to OS files Signed-off-by: Martin Schurz <[email protected]> * change default handling for all roles Signed-off-by: Martin Schurz <[email protected]> * fix issues Signed-off-by: Martin Schurz <[email protected]> * add documentation Signed-off-by: Martin Schurz <[email protected]> * Update main.yml Co-authored-by: Sebastian Gumprich <[email protected]>	2020-12-20 20:46:57 +01:00
Sebastian Gumprich	a46642ee92	merge ssh-hardening role into collection	2020-11-07 21:46:45 +01:00