andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,989 Commits 14 Branches 64 Tags
f3337f33b360f1806901ae61e85e00ddef4771db
Commit Graph
1989 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
junicastandJochen Demmer f3337f33b3 Add oddjob mkhomedir option rhel pam (#675) 
* added support for oddjob mkhomedir via optional var

* optimized conditional

* added variable description

Signed-off-by: Jochen Demmer <[email protected]>

* added support for oddjob mkhomedir via optional var

Signed-off-by: Jochen Demmer <[email protected]>

* optimized conditional

Signed-off-by: Jochen Demmer <[email protected]>

* added variable description

Signed-off-by: Jochen Demmer <[email protected]>

---------

Signed-off-by: Jochen Demmer <[email protected]>
Co-authored-by: Jochen Demmer <[email protected]>
 2023-05-23 11:19:40 +02:00
dev-sec CI c597eb97b2 update changelog 2023-05-22 13:56:42 +00:00
Andreas Wagnerandwhysthatso d7bda7ca3a expand on check conditions for non-file locations of logs (#674) 
Co-authored-by: whysthatso <[email protected]>
 2023-05-22 15:53:33 +02:00
dev-sec CI 037919e67a update changelog 2023-04-28 12:08:48 +00:00
schurzi ed5aefad3e Merge pull request #667 from dev-sec/molecule_update 
use new molecule-plugins
 2023-04-28 14:05:46 +02:00
Martin Schurz e5b8df07e2 use new molecule-plugins 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-28 13:48:45 +02:00
dev-sec CI 808cc6d78a update changelog 2023-04-17 07:51:08 +00:00
schurzi 1cce7bca9a Merge pull request #662 from dev-sec/codespell 
add spellchecking with codespell
 2023-04-17 09:47:53 +02:00
Martin Schurz 74c76b8240 correct workflow name and use main version 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-16 22:57:44 +02:00
Martin Schurz cd56c017ba add parameter for skipped words 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-16 22:54:43 +02:00
Martin Schurz 93ddd4b45e use shared workflow 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-16 22:49:53 +02:00
Martin Schurz 7259d6b5fd fix spelling errors 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-14 23:51:53 +02:00
Martin Schurz edcada16e4 add spellchecking with codespell 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-14 23:34:05 +02:00
dev-sec CI 7e31002555 update galaxy.yml with new version 2023-04-13 08:40:54 +00:00
dev-sec CI 8816969278 update changelog 2023-04-12 22:51:41 +00:00
schurzi 7e6e43e0a5 Merge pull request #657 from dev-sec/min_ansible_ver 8.7.0 2023-04-13 00:48:29 +02:00
dev-sec CI b79eb83d4f update changelog 2023-04-12 20:24:10 +00:00
Martin Schurz eb47f4dce0 Merge branch 'master' into min_ansible_ver 2023-04-12 22:22:36 +02:00
schurzi 4a21ec0234 Merge pull request #656 from dev-sec/update_Tests 
Update test environment
 2023-04-12 22:21:49 +02:00
Martin Schurz bb47300798 remove unneccessary collection include 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-12 20:27:35 +02:00
Martin Schurz de0439ed58 remove unneccessary collection include 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-12 20:22:22 +02:00
Martin Schurz 6e48f686a9 add fedora to testing 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-12 20:21:27 +02:00
Martin Schurz 0014a3be36 update metadata 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-12 20:18:29 +02:00
Martin Schurz a186760b45 exclude broken tests 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-11 09:51:05 +02:00
Martin Schurz a5a065f880 shorten text 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-11 07:49:38 +02:00
Martin Schurz bc9795c215 add noqa for linter 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-11 07:37:07 +02:00
Martin Schurz f02f8b9a90 add procps for Debian 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-11 07:20:44 +02:00
Martin Schurz 5cc7b8dee3 add waivers for os_hardening 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-11 07:17:29 +02:00
Martin Schurz ea922f6dca fix lint error 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 23:49:52 +02:00
Martin Schurz e43f180112 update waiver path 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 23:48:52 +02:00
Martin Schurz 001900ac35 require ansible.builtin.user to be at least 2.11 since options are needed 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 23:42:27 +02:00
Martin Schurz 31c9885610 use docker for inspec-auditor 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 23:22:41 +02:00
Martin Schurz 4a9d6033eb try docker for inspec-auditor 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 23:04:46 +02:00
Martin Schurz ebab98930c try docker for inspec-auditor 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 22:58:28 +02:00
Martin Schurz 5357f9e718 use current version of amazon linux 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 22:23:48 +02:00
Martin Schurz dd5ad568b3 fix deprecation warnings 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 20:36:03 +02:00
Martin Schurz 63dc9d3be8 use current amazon linux 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 19:44:01 +02:00
Martin Schurz 7b69c4bd47 add collection link 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 11:21:12 +02:00
Martin Schurz e4ecfe2084 add collection to verify 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 11:03:33 +02:00
Martin Schurz e346c2300f remove unneccessary symlink 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 11:02:33 +02:00
Martin Schurz 2de009e3b5 use latest runner version 
Signed-off-by: Martin Schurz <[email protected]>
 2023-04-10 10:28:11 +02:00
dev-sec CI 604c6999ad update changelog 2023-03-31 08:14:01 +00:00
schurzi 29f8a2fb78 add testing for OpenBSD and FreeBSD (#642) 
* add testing for OpenBSD and FreeBSD

Signed-off-by: Martin Schurz <[email protected]>

* make python work

Signed-off-by: Martin Schurz <[email protected]>

* remove jinja template ...

Signed-off-by: Martin Schurz <[email protected]>

* make verify work

Signed-off-by: Martin Schurz <[email protected]>

* correct verify

Signed-off-by: Martin Schurz <[email protected]>

* correct verify

Signed-off-by: Martin Schurz <[email protected]>

* correct verify

Signed-off-by: Martin Schurz <[email protected]>

* correct verify

Signed-off-by: Martin Schurz <[email protected]>

* use right vm name for connect

Signed-off-by: Martin Schurz <[email protected]>

* add a bit of documentation

Signed-off-by: Martin Schurz <[email protected]>

* remove sudo

Signed-off-by: Martin Schurz <[email protected]>

* add weird OpenSBD workaround

Signed-off-by: Martin Schurz <[email protected]>

* make verify playbook more consistent

Signed-off-by: Martin Schurz <[email protected]>

* rename nonlinux to BSD

Signed-off-by: Martin Schurz <[email protected]>

* use openbsd7 for testing

Signed-off-by: Martin Schurz <[email protected]>

* correct use openbsd7 everywhere

Signed-off-by: Martin Schurz <[email protected]>

* add waivers

Signed-off-by: Martin Schurz <[email protected]>

* update waiver descriptions

Signed-off-by: Martin Schurz <[email protected]>

* use docker for inspec

Signed-off-by: Martin Schurz <[email protected]>

* keep looking right ;)

Signed-off-by: Martin Schurz <[email protected]>

* correct path to waivers

Signed-off-by: Martin Schurz <[email protected]>

* use ephemeral directory in docker

Signed-off-by: Martin Schurz <[email protected]>

* use bsd inspec profile

Signed-off-by: Martin Schurz <[email protected]>

* remove openbsd workaround

Signed-off-by: Martin Schurz <[email protected]>

* re-add openbsd workaround

Signed-off-by: Martin Schurz <[email protected]>

* commit suggestions

Signed-off-by: Martin Schurz <[email protected]>

* add supportet OS to metadata

Signed-off-by: Martin Schurz <[email protected]>

* use current python

Signed-off-by: Martin Schurz <[email protected]>

---------

Signed-off-by: Martin Schurz <[email protected]>
 2023-03-31 09:50:04 +02:00
schurzi b01f22b4a4 Merge pull request #654 from dev-sec/renovate/geerlingguy.git-3.x 
Update dependency geerlingguy.git to v3.0.1
 2023-03-31 09:26:49 +02:00
dev-sec CI 4a8ce39304 update changelog 2023-03-31 07:18:16 +00:00
renovate[bot] 32cc9665dd Update dependency geerlingguy.git to v3.0.1 
Signed-off-by: Renovate Bot <[email protected]>
 2023-03-31 07:15:43 +00:00
schurzi 0bfd5f7fa0 Merge pull request #653 from dev-sec/renovate/configure 
Configure Renovate
 2023-03-31 09:15:10 +02:00
Martin Schurz e9fa44c243 remove dependabot 
Signed-off-by: Martin Schurz <[email protected]>
 2023-03-31 09:12:55 +02:00
Martin Schurz 7456e441fc ignore jenovate in galaxy build 
Signed-off-by: Martin Schurz <[email protected]>
 2023-03-30 18:09:20 +02:00
Martin Schurz 4c7e189e5d add custom renovate config 
Signed-off-by: Martin Schurz <[email protected]>
 2023-03-30 18:05:39 +02:00