andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
459 Commits 14 Branches 64 Tags
e060504f48f00b61296f9ae0fa1c815e2474e8b1
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastian Gumprich e060504f48 Update release.yml 2020-05-09 20:26:09 +02:00
Sebastian Gumprich 4c5fa242bd Update release.yml 2020-05-09 20:21:22 +02:00
Sebastian Gumprich 1e6787204a add changelog and release workflow (#271) 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-05-09 20:07:36 +02:00
Sebastian Gumprich cc1df7af7b Update main.yml 2020-05-09 14:02:26 +02:00
Sebastian Gumprich 1aa132f9ea github action for changelog generation 2020-05-05 22:30:49 +02:00
Sebastian Gumprich f430284b8a add ansible-lint (#262) 
* Update .travis.yml
 2020-02-18 17:51:34 +01:00
Sebastian Gumprich aa3ceed887 Merge pull request #254 from kravietz/master 
Remove trailing whitespaces (ansible-lint 201)
 2020-01-15 11:06:19 +01:00
Sebastian Gumprich 9f11c47730 Revert "Add exception in sysctl task (#240)" (#242) 
This reverts commit 3e14d45d0c.
 2019-10-28 21:02:24 +01:00
Sebastian Gumprich 804538ebd7 Merge pull request #236 from jaredledvina/feature/allow-configuring-selinux-status 
Support configuring SELinux and default to enforcing
 2019-10-17 21:32:38 +02:00
Sebastian Gumprich 754138d50b Merge pull request #237 from yeoldegrove/centos-8 
add test support for CentOS8
 2019-10-09 19:52:49 +02:00
Sebastian Gumprich b158e3b78b Merge pull request #234 from 123Haynes/buster_support 
Add test support for debian buster
 2019-10-07 19:41:26 +02:00
Sebastian Gumprich d6123bceff Merge pull request #235 from jaredledvina/patch-1 
Update location of NSA RHEL 5 Guide
 2019-10-07 19:17:35 +02:00
Sebastian Gumprich d6deed26db Merge pull request #231 from rgarrigue/patch-1 
Changed local var name to a less common one
 2019-10-02 13:46:21 +02:00
Sebastian Gumprich 78f9419f14 Update main.yml 2019-09-26 21:54:27 +02:00
Sebastian Gumprich dd0c3cd2f5 Merge pull request #226 from joshuatalb/use-ansible-facts 
Use ansible facts for vars
 2019-07-01 21:49:52 +02:00
Sebastian Gumprich e69947a2a4 use distribution_major_version instead of distribution_version 2019-07-01 21:34:36 +02:00
Sebastian Gumprich 61ec2fff18 use distribution_major_version instead of distribution_version 2019-07-01 21:33:52 +02:00
Sebastian Gumprich f7eac8d3af Merge pull request #224 from Normo/master 
Fix deprecation warnings in Ansible 2.8
 2019-06-06 16:15:06 +02:00
Sebastian Gumprich 08ebd3d51b Merge pull request #220 from dev-sec/fix_219 
add docs to find-task in minimize access. fix #219
 2019-05-12 18:03:47 +02:00
Sebastian Gumprich 29d0421095 Merge pull request #159 from zbrojny120/master 
Fix errors produced by ansible-lint
 2019-04-30 16:21:48 +02:00
Sebastian Gumprich a9c8dfc248 Merge branch 'master' into master 2019-04-30 16:00:14 +02:00
Sebastian Gumprich 3b50d92444 Merge pull request #217 from dev-sec/remove_eol_os 
remove eol'd OS and add new
 2019-04-29 18:05:41 +02:00
Sebastian Gumprich 7c7f1a3fcc Merge pull request #214 from ChrisMcKee/patch-1 
Add note about docker under warning
 2019-04-14 15:34:06 +02:00
Sebastian Gumprich 66f6c3c8cf Merge pull request #209 from dev-sec/speedup 
change minimize access tasks to speed them up
 2019-03-24 20:02:17 +01:00
Sebastian Gumprich 6de1df0ed1 Merge pull request #212 from ruslo/pr.fix.typo 
Fix typo
 2019-03-20 09:02:31 +01:00
Sebastian Gumprich 6d5a401207 Merge pull request #211 from joshuatalb/chmod-fixes 
Update modprobe to 0644
 2019-02-02 19:11:36 +01:00
Sebastian Gumprich 06385ceaf0 Merge pull request #210 from joshuatalb/vagrant-test-fixes 
Test Kitchen Vagrant Fixes
 2019-01-28 21:14:22 +01:00
Sebastian Gumprich df809ad260 Merge pull request #207 from pmav99/patch-1 
[readme] Update documentation link
 2019-01-20 19:06:33 +01:00
Sebastian Gumprich 80f552b4f6 Merge pull request #206 from jonwrede/fedora 
Added fedora support
 2019-01-13 13:07:23 +01:00
Sebastian Gumprich ef120fbb49 Added proper fedora support 
Added to version check "|int" so jinja2 will do proper int comparison
Added failed_when to "activate gpg-check for yum-repos" because yum.conf is replaced in newer fedora versions.
    Task only fails if error is not "file doesn't exists"
Signed-off-by: Jonas Wrede <[email protected]>
 2019-01-10 11:27:26 +01:00
Sebastian Gumprich e04cc87a2f Merge pull request #204 from dev-sec/linting 
fix ansible lint remarks
 2018-11-22 19:58:12 +01:00
Sebastian Gumprich 9a57c6edaf add spaces to list 2018-11-18 10:22:13 +01:00
Sebastian Gumprich 2cb053a0e0 add commas to list 2018-11-18 10:19:10 +01:00
Sebastian Gumprich 2c06e4090a add commas to list 2018-11-18 10:18:04 +01:00
Sebastian Gumprich fbd7ff2993 remove duplicate Parameter 2018-11-18 10:13:58 +01:00
Sebastian Gumprich 1d83151e7b Merge pull request #203 from dev-sec/fix_202 
add colon to user env paths - fix #202
 2018-11-11 15:10:56 +01:00
Sebastian Gumprich 388958076a Merge pull request #200 from Normo/master 
Pass package list directly to apt and yum modules without using with_items loop
 2018-11-05 12:05:32 +01:00
Sebastian Gumprich b9acd71ece Merge pull request #199 from ccolic/master 
add /usr/bin/su to suid_guid whitelist
 2018-10-17 09:01:05 +02:00
Sebastian Gumprich d90f894701 Merge pull request #197 from szEvEz/master 
ensure that permissions to su-binary are not restricted to root user and group only, if os_security_users_allow contains the value change_user
 2018-10-12 08:39:16 +02:00
Sebastian Gumprich e71fce9015 Update main.yml 2018-10-11 09:32:15 +02:00
Sebastian Gumprich a73df4c5f3 Merge pull request #196 from dev-sec/1804 
add ubuntu 1804 support
 2018-10-11 09:27:40 +02:00
Sebastian Gumprich 7ecfbd932a Update issue templates 2018-10-06 18:54:17 +02:00
Sebastian Gumprich 590bc01769 Merge pull request #192 from dev-sec/auditd_disable 
add option to disable auditd
 2018-09-20 09:28:17 +02:00
Sebastian Gumprich 8f8623b86f Merge pull request #190 from dev-sec/fix_efi 
fix problems with efi and vfat
 2018-09-02 19:14:55 +02:00
Sebastian Gumprich 3da0d929b5 Merge pull request #189 from dev-sec/pwquality_amazon 
do not install passwdqc on amazon linux
 2018-09-02 16:21:33 +02:00
Sebastian Gumprich b529c37b20 Merge pull request #182 from Normo/master 
Fix core dump config file creation when core dumps are disabled
 2018-08-23 14:26:26 +02:00
Sebastian Gumprich 68ead9d1b0 Merge pull request #186 from BedrockSolutions/master 
added os_hardening_enabled flag
 2018-08-22 09:09:35 +02:00
Sebastian Gumprich fd4ee1af03 Merge pull request #184 from dev-sec/kitchen_travis 
add back run opts for debian 8 in travis
 2018-08-15 16:53:25 +02:00
Sebastian Gumprich c69d62ae78 Merge pull request #183 from dev-sec/kitchen_travis 
add amazon run opts to travis
 2018-08-15 15:56:33 +02:00
Sebastian Gumprich 30aa3fef3f Merge pull request #181 from dev-sec/minimize_access 
change minimize access method
 2018-08-01 21:34:55 +02:00
Sebastian Gumprich c8657c827d Merge pull request #180 from dev-sec/package 
use package instead of yum and apt
 2018-07-09 21:50:02 +02:00
Sebastian Gumprich 11506cd5ce Add explanation to remival of pam_ccreds 2018-07-09 21:13:11 +02:00
Sebastian Gumprich 7af72c8d28 Merge pull request #178 from dev-sec/travis 
add oracle7 to travis
 2018-07-01 13:10:02 +02:00
Sebastian Gumprich bd5948baad Merge pull request #176 from dev-sec/pam_perms 
fix wrong permissions passwdqc #170
 2018-06-29 20:55:58 +02:00
Sebastian Gumprich 44b32922ff Merge pull request #144 from dev-sec/auditd 
install and configure auditd - fix inspec package-08
 2018-06-29 20:55:39 +02:00
Sebastian Gumprich f440803429 Merge pull request #174 from carchrae/example-comment-fix 
ipv4 forwarding comment is inconsistent with example
 2018-06-16 19:18:48 +02:00
Sebastian Gumprich 0794a1227d Merge pull request #172 from martinbydefault/patch-1 
Rename pam_passwdqd.j2 to pam_passwdqc.j2
 2018-05-15 09:59:17 +02:00
Sebastian Gumprich 60c26e3b47 Update README.md 2018-04-29 12:48:21 +02:00
Sebastian Gumprich a002e5e6c9 Update README.md 2018-04-29 12:46:52 +02:00
Sebastian Gumprich 788b12b188 Merge pull request #160 from dev-sec/amazon 
add amazon linux testing
 2018-04-16 15:41:57 +02:00
Sebastian Gumprich a4e383795f Update README.md 2018-04-09 21:31:44 +02:00
Sebastian Gumprich 84d20634d1 Merge pull request #168 from Normo/package-state 
Use package state 'present' since 'installed' is deprecated
 2018-03-26 10:01:49 +02:00
Sebastian Gumprich 1159eb5f00 Update README.md 2018-03-15 15:59:42 +01:00
Sebastian Gumprich 79aaab36b6 Update README.md 2018-03-15 15:59:21 +01:00
Sebastian Gumprich aa0036a1c1 Update README.md 2018-03-14 17:19:26 +01:00
Sebastian Gumprich 81ba398bb1 Merge pull request #132 from HelioCampos/master 
Remove deprecated include for static tasks and use instead import_tasks fix #131
 2018-01-31 20:04:18 +01:00
Sebastian Gumprich a04c2c034c Merge branch 'master' into master 2018-01-31 19:47:10 +01:00
Sebastian Gumprich 0b0af3966d Merge pull request #161 from thomasjpfan/ansible2.4 
Update syntax to Ansible 2.4
 2018-01-25 09:00:03 +01:00
Sebastian Gumprich 7daabdc2db Merge pull request #158 from woneill/amazon_linux 
Add support for Amazon Linux
 2018-01-15 18:11:54 +01:00
Sebastian Gumprich c310e15d14 Merge pull request #146 from martinbydefault/master 
Removal of core dump hardening configuration if core dumps are allowed
 2017-12-23 18:34:26 +01:00
Sebastian Gumprich 24fd32ba84 Merge pull request #150 from kravietz/master 
Add kernel hardening settings from Ubuntu /etc/sysctl.d
 2017-12-23 15:46:11 +01:00
Sebastian Gumprich a1727e24e4 Merge pull request #139 from dev-sec/fix_124 
update readme
 2017-12-23 15:35:34 +01:00
Sebastian Gumprich ac50457d39 Merge pull request #153 from pinguinkiste/fs-whitelist 
Prevent disabling of filesystems via whitelist
 2017-12-23 15:24:22 +01:00
Sebastian Gumprich 743d2c871e Merge pull request #156 from oakey-b1/oakey-b1-patch-1 
Don't create home for system accounts
 2017-12-07 19:16:44 +01:00
Sebastian Gumprich 9df7355d5c Merge branch 'master' into master 2017-10-23 07:33:22 +02:00
Sebastian Gumprich 0ddb26a7f7 Merge pull request #149 from martinbydefault/patch-1 
fixed tag
 2017-10-20 18:21:56 +02:00
Sebastian Gumprich 7438e0440a Merge branch 'master' into master 2017-10-05 20:47:18 +02:00
Sebastian Gumprich 49d380f00c Merge pull request #138 from dev-sec/modprobe 
add modprobe template, control os-10
 2017-08-08 08:32:47 +02:00
Sebastian Gumprich cfda4f79ac Update RedHat-6.yml 2017-08-07 22:11:33 +02:00
Sebastian Gumprich d33b8f1c40 fix typo 2017-08-07 22:08:03 +02:00
Sebastian Gumprich 637890223e Merge branch 'master' into modprobe 2017-08-07 22:01:38 +02:00
Sebastian Gumprich e1395fb2f2 Update minimize_access.yml 2017-08-07 21:55:30 +02:00
Sebastian Gumprich 9fa496f91d Merge pull request #119 from dev-sec/exec_shield 
remove execshield sysctl-parameter on rhel7
 2017-08-07 21:46:42 +02:00
Sebastian Gumprich 653c5cbf79 Merge branch 'master' into exec_shield 2017-08-07 19:33:50 +02:00
Sebastian Gumprich 02a475a465 Merge pull request #142 from duk3luk3/fix/no-blacklist-rsync 
Remove rsync from package blacklist
 2017-08-07 18:51:30 +02:00
Sebastian Gumprich a88ff85ec0 Merge pull request #136 from dev-sec/passwd 
add passwd task, control os-03
 2017-08-07 13:08:50 +02:00
Sebastian Gumprich 8bbd6f0f52 Update minimize_access.yml 2017-08-06 22:12:26 +02:00
Sebastian Gumprich f1df3a3c48 Merge pull request #134 from dev-sec/style 
style update
 2017-08-06 14:52:08 +02:00
Sebastian Gumprich 0aa330a35f Merge pull request #135 from dev-sec/prelinkt 
remove prelink package, control package-09
 2017-08-06 14:52:02 +02:00
Sebastian Gumprich a461deffff Merge branch 'master' into style 2017-08-05 21:46:58 +02:00
Sebastian Gumprich 09bcc0baad Merge pull request #137 from dev-sec/netrc 
new task for delete netrc files, control os-09
 2017-08-05 21:05:04 +02:00
Sebastian Gumprich 129f1a2314 Merge pull request #130 from fazlearefin/master 
Fix ansible.cfg and use comment filter
 2017-07-17 21:05:39 +02:00
Sebastian Gumprich 6d21d249b9 Merge pull request #120 from dev-sec/combined_sysctl 
add more sysctl settings, allow overwriting
 2017-06-27 20:59:04 +02:00
Sebastian Gumprich 8f6d3b1800 use with_flattened and default lists 2017-06-27 12:10:32 +02:00
Sebastian Gumprich 7bbd479a9a Update README.md 2017-05-28 18:31:10 +02:00
Sebastian Gumprich 24baf2c126 Merge pull request #126 from pestaa/patch-1 
Converts set to JSON-serializable list
 2017-05-07 13:25:11 +02:00
Sebastian Gumprich 7fdd7b4bb8 Merge pull request #106 from dev-sec/skip_fail 
omit empty variables
 2017-03-14 18:32:22 +01:00
Sebastian Gumprich 7f1415f339 Merge pull request #114 from dev-sec/fix_111 
install initramfs-tools
 2017-03-14 18:32:16 +01:00
Sebastian Gumprich a9095928ac Merge pull request #117 from dev-sec/shadow_owner 
change shadow owner in debian systems
 2017-03-01 21:15:47 +01:00
Sebastian Gumprich 987a3331f0 Merge pull request #110 from dev-sec/docker 
use new Docker images
 2017-03-01 20:31:08 +01:00