Commit Graph
100 Commits
Author SHA1 Message Date
Christoph Hartmann 0aba114a72 purge insecure packages (#275)
Signed-off-by: Christoph Hartmann <[email protected]>
2020-06-02 08:38:52 +02:00
Christoph Hartmann 09a655a8b4 allow customization of login gracetime and max sessins
Signed-off-by: Christoph Hartmann <[email protected]>
2020-06-01 10:02:31 +02:00
Christoph Hartmann 6505157c62 Merge pull request #101 from dev-sec/update_pwqual
update template
2016-10-24 14:16:13 +02:00
Christoph Hartmann 61f00eceec Merge pull request #79 from dev-sec/check_selinux_module
install selinux dependencies, check for already installed semodule
2016-10-24 14:14:22 +02:00
Christoph Hartmann fa59170f37 Merge pull request #100 from dev-sec/deprec_warn
fix deprecation warning for undefined error. #99
2016-10-24 10:54:08 +02:00
Christoph Hartmann 618608b7bb Merge pull request #7 from dev-sec/tab_fix
remove tabs. fix #6
2016-10-24 10:51:39 +02:00
Christoph Hartmann c5ca897214 Merge pull request #5 from dev-sec/dhparam
create dhparam file. fix #4
2016-09-23 02:07:22 +02:00
Christoph Hartmann df32a38336 improve gemfile, update readme for local tests 2016-09-12 20:59:00 +02:00
Christoph Hartmann ca0bd549ff Merge pull request #94 from dev-sec/pam_pwquality
add rhel7 pam_pwquality. fix #73
2016-09-05 18:37:23 +02:00
Christoph Hartmann 9fd2879b98 Merge pull request #71 from dev-sec/docker
add docker support
2016-07-26 21:43:15 +02:00
Christoph Hartmann b259a3b02b Merge pull request #58 from dev-sec/scp_ftp_faq
Add SCP/SFTP to FAQ
2016-05-19 11:50:10 +02:00
Christoph Hartmann 002ad0cbf7 Merge pull request #59 from hardening-io/ansible_2.0
Ansible 2.0 support
2016-03-06 12:28:36 +01:00
Christoph Hartmann 4ff3dbb7c8 Merge pull request #56 from hardening-io/ansible_20_test
add test support for ansible 1.9 and 2.0
2016-03-06 11:50:31 +01:00
Christoph Hartmann bf3bcc211e Merge pull request #13 from hardening-io/ansible_20_test
add test support for ansible 2.0 and 1.9
2016-03-06 11:48:35 +01:00
Christoph Hartmann bf43381064 Merge pull request #52 from hardening-io/update_platforms
update platforms in meta-file
2016-02-28 16:06:35 +01:00
Christoph Hartmann a82f7d8def Merge pull request #9 from hardening-io/simplify_local_testing
Simplify local testing with custom role
2016-02-28 16:01:47 +01:00
Christoph Hartmann fe99613e2f Merge pull request #11 from hardening-io/add_webhook_to_travis
add webhook for ansible galaxy
2016-02-28 15:55:12 +01:00
Christoph Hartmann 77c8ab6ae2 Merge pull request #10 from hardening-io/update_platforms
update platforms in meta-file
2016-02-28 15:54:00 +01:00
Christoph Hartmann 5cc477b6c5 Merge pull request #67 from hardening-io/mv_sysctl_to_defaults_2
Move sysctl vars to defaults
2016-02-24 08:13:34 +01:00
Christoph Hartmann 200bff0b01 Merge pull request #49 from hardening-io/disable_client_roaming
Disable experimental client roaming.
2016-02-24 08:13:10 +01:00
Christoph Hartmann 7de0d13881 Merge pull request #51 from hardening-io/add_webhook_to_travis
add webhook for ansible galaxy
2016-02-24 08:04:12 +01:00
Christoph Hartmann c7308bcd67 Merge pull request #68 from hardening-io/add_webhook_to_travis
add webhook for ansible galaxy
2016-02-24 08:03:36 +01:00
Christoph Hartmann ea862ccb3c Merge pull request #69 from hardening-io/update_platforms
update platforms in meta-file
2016-02-24 07:52:17 +01:00
Christoph Hartmann 8bc5c23bcf Merge pull request #62 from hardening-io/sys_uid_gid
make sys_uid and sys_gid configurable
2016-01-31 13:21:54 +01:00
Christoph Hartmann 122cea0823 Merge pull request #8 from hardening-io/new_role_layout
New role layout
2016-01-19 22:48:48 +01:00
Christoph Hartmann e683e449b2 use inspec as test framework 2016-01-02 23:16:44 +01:00
Christoph Hartmann b98e860a07 use inspec as test framework 2016-01-02 22:44:50 +01:00
Christoph Hartmann 63a56d1f7e Merge pull request #57 from hardening-io/packages_as_attributes
Packages as attributes
2016-01-02 22:31:48 +01:00
Christoph Hartmann 965d39be8d Merge pull request #56 from hardening-io/change_cat_to_tags
Change categories to tags for upcoming ansible 2.0
2016-01-02 22:18:40 +01:00
Christoph Hartmann 8332f79275 Merge pull request #47 from hardening-io/change_cat_to_tags
Change categories to tags for upcoming ansible 2.0
2016-01-02 22:17:50 +01:00
Christoph Hartmann 9be0b350bd Merge pull request #55 from hardening-io/single_prompt_params
Add SINGLE and PROMPT parameters.
2015-12-25 17:32:42 +01:00
Christoph Hartmann 8eeceea916 update changelog 2015-12-06 16:59:26 +01:00
Christoph Hartmann ce8c62bb4a add changelog generator 2015-12-06 16:59:05 +01:00
Christoph Hartmann 7a6039f0b2 update changelog 2015-12-06 16:58:35 +01:00
Christoph Hartmann d30f922093 add changelog generator 2015-12-06 16:56:56 +01:00
Christoph Hartmann 7d9c854873 update changelog 2015-12-06 16:56:24 +01:00
Christoph Hartmann 77f01ddf67 add changelog generator 2015-12-06 16:55:59 +01:00
Christoph Hartmann d07f601f40 Merge pull request #44 from hardening-io/new_dir_layout
New dir layout. Fix #43
2015-11-28 17:43:29 +01:00
Christoph Hartmann 1c057722a1 Merge pull request #52 from hardening-io/add_explicit_role_to_kitchen
Add explicit role-path to kitchen.yml
2015-11-28 17:42:03 +01:00
Christoph Hartmann 1ae134c6e7 Merge pull request #51 from hardening-io/fix_pam_template
Fix pam passwdqc template
2015-10-28 10:48:03 +01:00
Christoph Hartmann 652474b8f1 Merge pull request #49 from hardening-io/new_dir_layout
New dir layout
2015-10-22 11:50:13 +02:00
Christoph Hartmann 4997baafa2 Merge pull request #42 from hardening-io/add_travis_test
Add var to travis job
2015-10-22 11:42:19 +02:00
Christoph Hartmann d47e64f70d Merge pull request #46 from fitz123/master
remove duplicate "update pam" task
2015-10-18 15:56:29 +02:00
Christoph Hartmann d8783be67c Merge pull request #39 from fitz123/bugfix
bugfix. Now option true for PrintLastLog is available again
2015-09-28 13:16:06 +02:00
Christoph Hartmann 52d62abe4c Merge pull request #38 from hardening-io/improve_travis_tests
Add more travis-tests
2015-09-22 20:01:26 +02:00
Christoph Hartmann 9a3af69485 Merge pull request #35 from hardening-io/pam_selinux
Support for selinux and pam. fix #23
2015-09-22 19:58:58 +02:00
Christoph Hartmann 514a136463 Merge pull request #42 from hardening-io/travis_incl_task
improved travis-tests to cover more cases
2015-09-22 19:50:57 +02:00
Christoph Hartmann 91ecc19bc0 Merge pull request #39 from hardening-io/su_mode
Add mode to su-binary task. Fix #38
2015-09-01 23:21:31 +02:00
Christoph Hartmann 1046ede67a Merge pull request #37 from hardening-io/fix_hmac_ssh_client
Change variable for hmac from server to client
2015-09-01 08:25:59 +02:00
Christoph Hartmann b069a12800 Merge pull request #36 from hardening-io/update_kitchen-ansible
Update kitchen-ansible, remove separate debian install
2015-08-31 07:33:51 +02:00
Christoph Hartmann b05517c1f1 Merge pull request #40 from hardening-io/update_kitchen-ansible
Update kitchen-ansible, remove separate debian install
2015-08-31 07:31:34 +02:00
Christoph Hartmann fd81dbf559 Merge pull request #4 from hardening-io/update_kitchen-ansible
Update kitchen-ansible, remove separate debian install
2015-08-31 07:31:00 +02:00
Christoph Hartmann 90c72503bb fetch new repo data before we install anything 2015-08-09 17:43:09 -07:00
Christoph Hartmann f23b88f237 set system ruby path 2015-08-09 17:38:50 -07:00
Christoph Hartmann 5a63cafe09 update common kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
updating common files with changes that are configured in the profiles: kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
2015-08-09 17:38:50 -07:00
Christoph Hartmann fb1f395db5 update common kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
updating common files with changes that are configured in the profiles: kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
2015-08-09 17:38:50 -07:00
Christoph Hartmann 7e14a43694 Merge pull request #34 from hardening-io/separate_ssh_ports
Separate ssh client and server ports. Fix #33
2015-08-09 16:19:09 -07:00
Christoph Hartmann 5d9f852ce3 update common kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
updating common files with changes that are configured in the profiles: kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
2015-08-07 01:10:35 -07:00
Christoph Hartmann e68e325943 update common kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
updating common files with changes that are configured in the profiles: kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
2015-08-07 01:10:26 -07:00
Christoph Hartmann 936f6c287a Merge branch 'master' of github.com:hardening-io/ansible-ssh-hardening into update-common 2015-08-06 23:45:24 -07:00
Christoph Hartmann 3f485a8164 update common kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
updating common files with changes that are configured in the profiles: kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
2015-08-06 23:45:17 -07:00
Christoph Hartmann 3862773e3d Merge pull request #2 from hardening-io/separate_vars
Separate system-vars from editable vars.
2015-08-06 23:44:47 -07:00
Christoph Hartmann 950210348f Merge pull request #31 from hardening-io/max_auth_tries
Make MaxAuthTries configurable
2015-08-06 23:39:14 -07:00
Christoph Hartmann 4dcf55311a Merge pull request #30 from hardening-io/if_constructs
Change oneliner if-statements to be more readable
2015-08-06 23:38:42 -07:00
Christoph Hartmann 914edb2aec Merge pull request #36 from hardening-io/if_constructs
Change oneliner if-statements to be more readable
2015-08-06 23:37:24 -07:00
Christoph Hartmann 00e652bb29 update common kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
updating common files with changes that are configured in the profiles: kitchen.yml platforms (ansible), kitchen_debian.yml platforms (ansible)
2015-08-06 23:36:12 -07:00
Christoph Hartmann 3a79dab5d8 Merge pull request #29 from ypid/make-client-pw-auth-configurable
Make ssh client password login configurable.
2015-08-04 09:17:45 -07:00
Christoph Hartmann ba7afdf938 Merge pull request #27 from hardening-io/template_case
Fix join-filter, jinja-cases, intendation
2015-07-30 02:00:19 -07:00
Christoph Hartmann ced954f51e Merge pull request #25 from ypid/client-server-disable
Make it configurable to only harden ssh client/server or both (default).
2015-07-28 12:18:35 -07:00
Christoph Hartmann e0b1068e8c Merge pull request #24 from hardening-io/separate_vars
Separate system-vars from editable vars
2015-07-27 13:25:15 -07:00
Christoph Hartmann 40c2d36ddb Merge pull request #35 from hardening-io/separate_vars
Separate system-vars from editable vars. Fix #34
2015-07-27 13:24:51 -07:00
Christoph Hartmann 80d1e44776 Merge pull request #1 from hardening-io/add_test_readme
Add documentation for testing, change value in vars
2015-07-19 04:48:01 -07:00
Christoph Hartmann 0bcb2f35ba Merge pull request #33 from hardening-io/create_limits_d
Create limits.d-directory if it does not exist.
2015-07-13 10:37:02 -07:00
Christoph Hartmann 21375d32b5 Merge pull request #22 from hardening-io/contrib
Add correct CONTRIB-file
2015-06-26 07:59:51 -07:00
Christoph Hartmann 9f69e2889b Merge pull request #32 from hardening-io/contrib
Add correct CONTRIB-file
2015-06-26 07:59:29 -07:00
Christoph Hartmann 565b481752 Merge pull request #31 from hardening-io/galaxy_badge
Add Ansible Galaxy badge
2015-06-26 07:41:34 -07:00
Christoph Hartmann 75dbf1cae6 Merge pull request #30 from hardening-io/CL_RM_TODO
Update readme, todo, changelog, vars
2015-06-24 06:40:28 -07:00
Christoph Hartmann e9a9a12b58 Merge pull request #28 from hardening-io/modules
Add module configuration
2015-06-23 15:45:58 -07:00
Christoph Hartmann 1ff8b21a03 update gitter url 2015-06-24 00:02:42 +02:00
Christoph Hartmann ac4754ff16 Merge pull request #29 from hardening-io/suid_fix
List-cleanup and follow symlinks added
2015-06-23 14:57:25 -07:00
Christoph Hartmann 068e5104ec Merge pull request #27 from hardening-io/sysctl_bugfix
Fix two sysctl-settings
2015-06-23 14:55:09 -07:00
Christoph Hartmann 412c544ed9 Merge pull request #26 from hardening-io/ansible_galaxy
Add meta-files for Ansible Galaxy
2015-06-22 23:23:36 -07:00
Christoph Hartmann 4e9e10fd37 Merge pull request #21 from hardening-io/add_galaxy_badge
Add Ansible Galaxy badge
2015-06-22 23:22:25 -07:00
Christoph Hartmann 10267eb509 Merge pull request #23 from hardening-io/remove_authconfig
Delete authconfig-task on rhel-systems
2015-06-20 02:01:39 -07:00
Christoph Hartmann 3aa9a46466 Merge pull request #21 from hardening-io/rhosts
Add missing rhosts-include task
2015-06-20 02:01:05 -07:00
Christoph Hartmann 71c7042163 Merge pull request #24 from hardening-io/result_override
Use changed_when to avoid changed tasks
2015-06-19 02:48:08 -07:00
Christoph Hartmann 2fa4e7d94e Merge pull request #25 from hardening-io/system_accs
Disable System Accounts. Fix #6
2015-06-19 02:45:53 -07:00
Christoph Hartmann e4fcace51a Merge pull request #17 from hardening-io/travis
Add travis-support
2015-06-17 11:57:18 -07:00
Christoph Hartmann 194ea7497f Merge pull request #20 from hardening-io/sysctl_restyle
Change sysctl-task. Fix #18
2015-06-09 12:58:17 -07:00
Christoph Hartmann 67d04b3d7a Merge pull request #12 from hardening-io/suidsgid
Add remove suid/sgid function
2015-06-03 12:37:40 -07:00
Christoph Hartmann 645240998d Merge pull request #16 from hardening-io/cnd_ip_fwd
Add conditions for various tasks. Fix #15
2015-06-03 12:35:43 -07:00
Christoph Hartmann 57bb2e8c00 fix configuration of playbook path 2015-06-01 14:50:15 +02:00
Christoph Hartmann c6121c227d Merge pull request #11 from hardening-io/yum_rm_pkg
Add task to remove unused repos and pkgs
2015-06-01 05:49:20 -07:00
Christoph Hartmann 834d37ae66 Merge pull request #13 from hardening-io/sysctl_edit_names
Make tasks clearer
2015-06-01 05:24:13 -07:00
Christoph Hartmann 25a49bf688 Merge pull request #9 from hardening-io/ignore_ras
ignore RAs on Ipv6
2015-06-01 05:13:18 -07:00
Christoph Hartmann 6427879bc9 fix configuration of playbook path 2015-06-01 13:48:02 +02:00
Christoph Hartmann 01572d9041 Merge pull request #5 from hardening-io/yum
Enable gpg-check on all yum-repositories
2015-05-20 12:17:54 -07:00
Christoph Hartmann 9408d500a9 Merge pull request #4 from hardening-io/playbook_path
Change playbook-path to accomodate test-repo
2015-05-19 13:19:21 -07:00
Christoph Hartmann ee61f764c7 Merge pull request #19 from hardening-io/debian_install_script
Debian install script
2015-05-08 02:23:16 -07:00
Christoph Hartmann c05a8afa67 minor: update badge in readme 2015-05-01 11:25:17 +02:00