Commit graph

510 commits

Author SHA1 Message Date
Frederick Witty
0ee2de5e20
Addresses #318 - Thank you @kodebach & @bgro
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-27 12:04:29 -04:00
Fred W.
0efd92e2a3
Merge pull request #31 from ansible-lockdown/JUNE2025QA
June 2025 QA: Replace egrep to grep
2025-06-23 08:36:55 -04:00
Mark Bolwell
82cc458d7a
Fix logic and notes for in crypto policy building
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-20 11:32:31 +01:00
Mark Bolwell
379b184554
added changed_when to fix false warning errors
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-19 16:32:20 +01:00
Mark Bolwell
d2de2783a8
added ability to fetch audit and update title
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-19 16:31:37 +01:00
Frederick Witty
acacb7a6bc
QA Fixes
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-16 17:18:08 -04:00
Frederick Witty
38a173546c
Update auditd with check_mode
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-16 16:49:36 -04:00
Frederick Witty
b38e7d06eb
var fixes for 1.1.2.3.x and 1.1.2.4.x
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-16 15:14:08 -04:00
Frederick Witty
6ced990430
Update handler naming change_requires_reboot to set reboot required
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-16 14:58:21 -04:00
Mark Bolwell
b65504de6b
Updated egrep
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:20:40 +01:00
Mark Bolwell
f892525a7c
5.1.10 and 5.1.11 updated variable naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:19:18 +01:00
Mark Bolwell
02008339b4
updated regex
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:18:22 +01:00
Mark Bolwell
2724faf1fc
50-redhat.conf var naming update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:17:00 +01:00
Mark Bolwell
2eb85294c8
Updated conditionals for audit steps
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:15:42 +01:00
Mark Bolwell
ce3ae8361e
Updated logic for root password check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:14:58 +01:00
Mark Bolwell
6770e5a4ff
added check_mode false to task
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:13:53 +01:00
Mark Bolwell
27c7ec3604
fixed typos
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:12:21 +01:00
Frederick Witty
3a0ee6e9f8
update 1.3.1.6 log to grep -E
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-12 15:44:03 -04:00
Frederick Witty
f40d17df92
Update eprep based tasks to grep/awk
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-12 12:42:44 -04:00
Mark Bolwell
2e3499ca8c
added missing square brace
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 16:47:01 +01:00
Mark Bolwell
3197252611
Merge branch 'benchmark_v2.0.0' into interactive_user_update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 16:14:18 +01:00
Mark Bolwell
2256456f0e
align with public fixes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 16:12:31 +01:00
Mark Bolwell
f2c03f1e68
variable networkmanager package and typo fixes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 16:11:36 +01:00
Mark Bolwell
7673c2ff00
Added home directory discovery
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 15:53:41 +01:00
Mark Bolwell
97abfaf9f8
updated passwd variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 15:41:12 +01:00
Mark Bolwell
f29fc9088c
fixed var naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 10:53:32 +01:00
uk-bolly
73c84de639
Merge pull request #28 from ansible-lockdown/may25_issues
May25 issues
2025-05-23 16:33:53 +01:00
Frederick Witty
a16b6b96bc
Fix for #325 thank you @mindrb
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-05-23 11:14:58 -04:00
Mark Bolwell
cc48a0d0b5
Interactive user discovery improve thanks to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 15:53:03 +01:00
Mark Bolwell
4357f132a9
improved test for passwd entries
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 15:50:41 +01:00
Mark Bolwell
c23bce5c75
added check mode logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 14:35:50 +01:00
Mark Bolwell
b9a59b9adc
added check_mode logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 14:30:30 +01:00
Mark Bolwell
de45131085
added rhel9cis_rsyslog_ansiblemanage conditional
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 14:25:22 +01:00
Mark Bolwell
e9babc8e3b
added ignore comments in file
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 14:22:49 +01:00
Frederick Witty
23b2909073
QA Fixes
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-05-15 16:48:44 -04:00
Fred W.
1d266e61a7
Merge pull request #25 from ansible-lockdown/benchmark_v2.0.0
Benchmark v2.0.0
2025-05-09 15:12:17 -04:00
Fred W.
2c35f64f38
Merge pull request #24 from ansible-lockdown/devel
May 2025 devel to latest alignment
2025-05-09 14:51:13 -04:00
Frederick Witty
120207440c
Typo fixes
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-04-15 15:22:19 -04:00
Mark Bolwell
ce43c573ee
update tags and issue #311 thanks to @rilatu
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-15 12:54:34 +01:00
Mark Bolwell
b04570dfe4
removed legacy option
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-15 11:40:49 +01:00
Mark Bolwell
ec57b85fdf
Updated 5.3.3.1.1 regex issue #315 thanks to @jrdbarnes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-15 11:11:19 +01:00
Mark Bolwell
3d4bc2ab3d
Update name and conditionals
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-15 11:07:15 +01:00
Mark Bolwell
52f5f23b00
improve ansible facts conditionals
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-15 11:04:33 +01:00
Mark Bolwell
a41de702f4
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-01 10:00:24 +01:00
Mark Bolwell
7a3efd4920
added fetch and ansible facts
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-01 09:56:51 +01:00
Mark Bolwell
bd425a068d
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-01 08:14:02 +01:00
Mark Bolwell
9bbf5b7a81
updated var name to remove capital
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-01 08:08:28 +01:00
Mark Bolwell
576531e986
fetch audit and compliance facts added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-03-31 14:50:40 +01:00
Mark Bolwell
7b1c8e9ef0
additional fix for #309
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-03-31 12:37:58 +01:00
Mark Bolwell
cedf510b94
addressed #309
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-03-31 12:36:27 +01:00