schurzi
29f8a2fb78
* add testing for OpenBSD and FreeBSD Signed-off-by: Martin Schurz <[email protected]> * make python work Signed-off-by: Martin Schurz <[email protected]> * remove jinja template ... Signed-off-by: Martin Schurz <[email protected]> * make verify work Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * correct verify Signed-off-by: Martin Schurz <[email protected]> * use right vm name for connect Signed-off-by: Martin Schurz <[email protected]> * add a bit of documentation Signed-off-by: Martin Schurz <[email protected]> * remove sudo Signed-off-by: Martin Schurz <[email protected]> * add weird OpenSBD workaround Signed-off-by: Martin Schurz <[email protected]> * make verify playbook more consistent Signed-off-by: Martin Schurz <[email protected]> * rename nonlinux to BSD Signed-off-by: Martin Schurz <[email protected]> * use openbsd7 for testing Signed-off-by: Martin Schurz <[email protected]> * correct use openbsd7 everywhere Signed-off-by: Martin Schurz <[email protected]> * add waivers Signed-off-by: Martin Schurz <[email protected]> * update waiver descriptions Signed-off-by: Martin Schurz <[email protected]> * use docker for inspec Signed-off-by: Martin Schurz <[email protected]> * keep looking right ;) Signed-off-by: Martin Schurz <[email protected]> * correct path to waivers Signed-off-by: Martin Schurz <[email protected]> * use ephemeral directory in docker Signed-off-by: Martin Schurz <[email protected]> * use bsd inspec profile Signed-off-by: Martin Schurz <[email protected]> * remove openbsd workaround Signed-off-by: Martin Schurz <[email protected]> * re-add openbsd workaround Signed-off-by: Martin Schurz <[email protected]> * commit suggestions Signed-off-by: Martin Schurz <[email protected]> * add supportet OS to metadata Signed-off-by: Martin Schurz <[email protected]> * use current python Signed-off-by: Martin Schurz <[email protected]> --------- Signed-off-by: Martin Schurz <[email protected]>
22 lines
1005 B
YAML
22 lines
1005 B
YAML
ssh-17:
|
|
run: false
|
|
justification: "GSSAPIAuthentication is disabled. see: https://github.com/dev-sec/ansible-collection-hardening/pull/598"
|
|
ssh-18:
|
|
run: false
|
|
justification: "GSSAPIDelegateCredentials is disabled. see: https://github.com/dev-sec/ansible-collection-hardening/pull/598"
|
|
sshd-30:
|
|
run: false
|
|
justification: "KerberosAuthentication is disabled. see: https://github.com/dev-sec/ansible-ssh-hardening/pull/171"
|
|
sshd-31:
|
|
run: false
|
|
justification: "KerberosOrLocalPasswd is disabled. see: https://github.com/dev-sec/ansible-ssh-hardening/pull/171"
|
|
sshd-32:
|
|
run: false
|
|
justification: "KerberosTicketCleanup is disabled. see: https://github.com/dev-sec/ansible-ssh-hardening/pull/171"
|
|
sshd-33:
|
|
run: false
|
|
justification: "GSSAPIAuthentication is disabled. see: https://github.com/dev-sec/ansible-collection-hardening/pull/598"
|
|
sshd-34:
|
|
run: false
|
|
justification: "GSSAPICleanupCredentials is disabled. see: https://github.com/dev-sec/ansible-collection-hardening/pull/598"
|