488ff6a7c3
* first testing with tasks and variables Signed-off-by: Ludwig Bayerlein <[email protected]> * update variables for dir options Signed-off-by: Ludwig Bayerlein <[email protected]> * updated permissions and defaults Signed-off-by: Ludwig Bayerlein <[email protected]> * fix home dir permissions Signed-off-by: Ludwig Bayerlein <[email protected]> * updated tasks with useful variables Signed-off-by: Ludwig Bayerlein <[email protected]> * reorder tasks. first remount, then manage fstab and fix permissions on directories. Renaming task names with mountpoints (slashes) Signed-off-by: Ludwig Bayerlein <[email protected]> * shorten tasks with list items Signed-off-by: Ludwig Bayerlein <[email protected]> * change defaults for /boot directory, because its a bad behaviour, if ansible changes boot entries with a default value Signed-off-by: Ludwig Bayerlein <[email protected]> * Update documentation for new parameters to manage mountpoints Signed-off-by: Ludwig Bayerlein <[email protected]> * Update roles/os_hardening/tasks/minimize_access.yml Co-authored-by: Sebastian Gumprich <[email protected]> Signed-off-by: Ludwig Bayerlein <[email protected]> * Update roles/os_hardening/tasks/minimize_access.yml Co-authored-by: Sebastian Gumprich <[email protected]> Signed-off-by: Ludwig Bayerlein <[email protected]> * Fix state on every new task Signed-off-by: Ludwig Bayerlein <[email protected]> * loop instead of list Signed-off-by: Ludwig Bayerlein <[email protected]> * testing remount with register Signed-off-by: Ludwig Bayerlein <[email protected]> * add remounts with loop over all changed folders Signed-off-by: Ludwig Bayerlein <[email protected]> * testing and solving trouble with variable names Signed-off-by: Ludwig Bayerlein <[email protected]> * optimize default permissions for var-log-audit Signed-off-by: Ludwig Bayerlein <[email protected]> * optimize default permissions for var-log-audit Signed-off-by: Ludwig Bayerlein <[email protected]> * change to new optimizied permissions of var-log-audit Signed-off-by: Ludwig Bayerlein <[email protected]> * fix some defaults in fstab to configure as mounted Signed-off-by: Ludwig Bayerlein <[email protected]> * add stat and check, if boot folder exists Signed-off-by: Ludwig Bayerlein <[email protected]> Co-authored-by: Ludwig Bayerlein <[email protected]> Co-authored-by: Sebastian Gumprich <[email protected]>