andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,405 Commits 14 Branches 64 Tags
e8e552f3aecbaf40b23b38fe8dd079200e2dd44f
Commit Graph
1405 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sebastian Gumprich 0757a3d1c3 fix linting errors 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-23 13:21:46 +02:00
dev-sec CI 30d5641e9b update changelog 2020-08-22 16:18:01 +00:00
schurzi a82e1a7a9f fix litner errors (#322) 
* fix litner errors

Signed-off-by: Martin Schurz <[email protected]>

* make linter more happy

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-22 18:14:54 +02:00
dev-sec CI 6b465f9cbb update changelog 2020-08-22 13:23:59 +00:00
schurzi b37c2ddb69 Merge pull request #303 from dev-sec/arch_support 
Arch support
 2020-08-22 15:21:18 +02:00
Sebastian Gumprich de5a7ce506 add archlinux support 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-22 14:08:08 +02:00
Andre Lehmann 77434b8a37 Make compatible with ArchLinux 
Signed-off-by: Andre Lehmann <[email protected]>
 2020-08-22 13:39:44 +02:00
dev-sec CI a806a25af5 update changelog 2020-08-22 06:56:30 +00:00
schurzi 4ddbbb2a61 fix linting for molecule (#301) 
Signed-off-by: Martin Schurz <[email protected]>
 2020-08-22 08:53:44 +02:00
dev-sec CI 17570fda66 update changelog 2020-08-18 22:08:28 +00:00
schurzi 989f7b0e1e Merge pull request #300 from danielkubat/master 
define file permissions explicitly
 2020-08-19 00:05:51 +02:00
danielkubat fd10d8e8d2 single quotes added to follow role formatting 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 23:50:46 +02:00
danielkubat 34abe1ab03 mode defined in octal form 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 22:50:10 +02:00
danielkubat 2a75fc11d3 permissions explicitly defined 
Signed-off-by: danielkubat <[email protected]>
 2020-08-18 22:38:08 +02:00
dev-sec CI 6f0181b2fc update changelog 2020-08-17 10:17:48 +00:00
Daniel Kubat 7077187a67 replace module parameter fixed (#297) 
Signed-off-by: danielkubat <[email protected]>
6.2.0 		2020-08-17 12:15:04 +02:00
dev-sec CI e698433939 update changelog 2020-08-16 18:19:59 +00:00
dev-sec CI 37ab009093 update changelog 2020-08-16 18:19:43 +00:00
schurzi 56f6cd0337 Merge pull request #296 from dev-sec/fedora 
fix fedora build
 2020-08-16 20:17:15 +02:00
schurzi aaece07fe0 Merge pull request #321 from dev-sec/fedora 
use systemd in fedora
 2020-08-16 20:16:53 +02:00
dev-sec CI 337c7dbbed update changelog 2020-08-16 08:06:54 +00:00
Daniel KubatandSebastian Gumprich 2c4505addd use find module instead of shell (#294) 
* use find module to find yum repos, regexp fixes

Signed-off-by: danielkubat <[email protected]>

* use loop instead of with_*

Signed-off-by: danielkubat <[email protected]>

* Update tasks/yum.yml

Co-authored-by: Sebastian Gumprich <[email protected]>
 2020-08-16 10:04:26 +02:00
Sebastian Gumprich 88fecc4f2e try to fix fedora build 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-16 09:53:11 +02:00
Sebastian Gumprich 0b38b85a0a install systemd in fedora 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-16 09:52:59 +02:00
dev-sec CI c777133050 update changelog 2020-08-13 09:48:20 +00:00
Alex Domoradov 29158e4285 Optimize and unify when clause (#295) 
Signed-off-by: Alex Domoradov <[email protected]>
 2020-08-13 11:45:44 +02:00
dev-sec CI 5cad140f7b update changelog 2020-08-09 15:04:56 +00:00
Sebastian Gumprich fa2cf790f8 Merge pull request #320 from dev-sec/pam 
add separate option for controlling motd via pam
 2020-08-09 17:02:02 +02:00
Martin Schurz 5cf53b215f add separate option for controlling motd via pam 
makes it possible to set different values for motd via sshd and pam.
Also create a backup file of pam configuration, to allow user to restore
the previous settings.

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-08 18:14:38 +02:00
dev-sec CI bbe5ad4707 update changelog 2020-08-07 18:06:25 +00:00
schurzi b3d7acee44 Merge pull request #48 from dev-sec/kitchen_travis 
update testing
 2020-08-07 20:04:50 +02:00
Sebastian Gumprich 6b42f12434 update testing 
Signed-off-by: Sebastian Gumprich <[email protected]>
 2020-08-07 19:30:58 +02:00
dev-sec CI eb777fbe2f update changelog 2020-08-07 07:02:27 +00:00
schurzi eaeca04d96 do not blacklist used filesystems (#289) 
* add additional check for efi

some systems seem to require vfat because of efi, despite not exposing a
/sys/firmware/efi directory.

Signed-off-by: Martin Schurz <[email protected]>

* make linter happy

Signed-off-by: Martin Schurz <[email protected]>

* rework check to check for all used filesystems

so we don't break existing mounts with our configuration

Signed-off-by: Martin Schurz <[email protected]>

* do not check this on el6

Signed-off-by: Martin Schurz <[email protected]>

* add comment to clarify

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-07 08:59:46 +02:00
dev-sec CI 83a6d88c46 update changelog 2020-08-03 19:31:28 +00:00
Sebastian Gumprich 04d19fd195 fix typo 2020-08-03 21:28:23 +02:00
dev-sec CI fe7e37e6e9 update changelog 2020-08-03 13:58:20 +00:00
schurzi 387fc472bd improve testing (#287) 
* fix problem with package_facts on SuSE

SuSE Linux does not work with ansibel module packet_facts, so we need to
exclude this task there.

Signed-off-by: Martin Schurz <[email protected]>

* fix local docker tests for all distributions

Signed-off-by: Martin Schurz <[email protected]>

* fix local vagrant tests for all distributions

Signed-off-by: Martin Schurz <[email protected]>

* simplify travis tests

Signed-off-by: Martin Schurz <[email protected]>

* fix opensuse in travis

Signed-off-by: Martin Schurz <[email protected]>

* add fixes for suse

Signed-off-by: Martin Schurz <[email protected]>

* add special case for suse docker

Signed-off-by: Martin Schurz <[email protected]>
 2020-08-03 15:55:27 +02:00
dev-sec CI 20bf4eaa99 update changelog 2020-07-28 08:29:59 +00:00
Sebastian Gumprich f1a65f5f44 Merge pull request #318 from dev-sec/fix_kitchen 
fix local kitchen tests
 2020-07-28 09:24:22 +02:00
Martin Schurz 04f731a08c fix local kitchen tests 
somehow a "real" linux needs different options than WSL. This is now
also working on debian 10

Signed-off-by: Martin Schurz <[email protected]>
 2020-07-28 09:12:43 +02:00
schurzi 9b14f64f67 Merge pull request #317 from aqw/umask 
fix sftp_umask; store as literal not octal
 2020-07-28 08:59:12 +02:00
dev-sec CI b7791833a7 update changelog 2020-07-28 06:33:18 +00:00
Sebastian Gumprich f50f22ca66 Merge pull request #294 from aqw/master 
add SmartOS support
 2020-07-28 08:30:17 +02:00
Alex Waite e59dd46c23 fix sftp_umask; store as literal not octal 
Numbers with leading zeros need to be quoted in Ansible, otherwise they
are interpreted as octal. Which the templating happily writes out in...
decimal.

In this case, sftp_umask 0027 was ending up as 23 in sshd.conf.

Signed-off-by: Alex Waite <[email protected]>
 2020-07-28 07:44:54 +02:00
Alex Waite 670be01d69 add var ssh_host_keys_dir, for OSes with alternate host key locations 
Signed-off-by: Alex Waite <[email protected]>
 2020-07-28 07:33:52 +02:00
Alex Waite 1a28c7bdef add SmartOS support 
Signed-off-by: Alex Waite <[email protected]>
 2020-07-28 07:29:39 +02:00
Alex Waite 1f1c715ec7 add var sshd_path, for OSs with alternate sshd locations 
Signed-off-by: Alex Waite <[email protected]>
 2020-07-28 07:29:27 +02:00
dev-sec CI 6fddedccb6 update changelog 2020-07-27 14:53:41 +00:00
liteua bf7c4dd46d add ssh_banner_path variable (#316) 
Signed-off-by: Volodymyr Litvak <[email protected]>
 2020-07-27 16:46:04 +02:00