Commit graph

76 commits

Author SHA1 Message Date
Frederick Witty
11becb32c5
QA Fixes
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-02-10 16:01:05 -05:00
Mark Bolwell
c7567a98ac
fixed tags and audit logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 08:57:45 +00:00
Mark Bolwell
383c4651c5
added public fix #396
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-01 17:44:17 +01:00
Frederick Witty
d927b3006d
linting clean up
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-11 16:05:24 -04:00
Frederick Witty
67c574d8a9
Updates from Public
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-10 12:57:50 -04:00
Mark Bolwell
1bdef212bd
Apply latest public fixes benchmark_v2.0.0
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-07-02 10:47:56 +01:00
Fred W.
0efd92e2a3
Merge pull request #31 from ansible-lockdown/JUNE2025QA
June 2025 QA: Replace egrep to grep
2025-06-23 08:36:55 -04:00
uk-bolly
3dfa4f7e86
Merge pull request #348 from ansible-lockdown/root_user_check
root password and other improvements
2025-06-19 17:28:45 +02:00
Frederick Witty
acacb7a6bc
QA Fixes
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-16 17:18:08 -04:00
Frederick Witty
b38e7d06eb
var fixes for 1.1.2.3.x and 1.1.2.4.x
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-16 15:14:08 -04:00
Frederick Witty
6ced990430
Update handler naming change_requires_reboot to set reboot required
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-16 14:58:21 -04:00
Mark Bolwell
2724faf1fc
50-redhat.conf var naming update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:17:00 +01:00
Mark Bolwell
2eb85294c8
Updated conditionals for audit steps
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 17:15:42 +01:00
Mark Bolwell
35d0bf9c4b
updated auditing conditionals
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 13:19:14 +01:00
Mark Bolwell
51b20d383d
Renamed variable to prelim
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 10:07:27 +01:00
polski-g
5226f14b3e
fetch of auditd logfile should run in check_mode
Signed-off-by: polski-g <polski_g@sent.at>
2025-06-06 10:03:47 -04:00
uk-bolly
f70821bf7e
Merge pull request #340 from ansible-lockdown/interactive_user_update
Updated variable naming for interactive_users
2025-05-28 18:42:20 +01:00
Mark Bolwell
2256456f0e
align with public fixes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 16:12:31 +01:00
Mark Bolwell
f740d89b54
Added user home discovery
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 15:36:39 +01:00
Mark Bolwell
d136bfa381
Updated variable naming for interactive_users
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-28 10:22:30 +01:00
polski_g
f564135e72
Check for existence of sshd_config.d/50-redhat.conf before trying to modify it
Signed-off-by: polski-g <polski_g@sent.at>
2025-05-23 12:32:02 -04:00
Mark Bolwell
f83e5a69a2
interactive users ilogic improvements thanks to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 16:05:01 +01:00
Mark Bolwell
cc48a0d0b5
Interactive user discovery improve thanks to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 15:53:03 +01:00
Mark Bolwell
c23bce5c75
added check mode logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 14:35:50 +01:00
Mark Bolwell
15bf03c754
added check mode logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-23 14:34:30 +01:00
Frederick Witty
23b2909073
QA Fixes
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-05-15 16:48:44 -04:00
Frederick Witty
42024903e3
revamp set facts premlim_ max_int_uid and prelim_min_int_uid
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-04-23 12:47:22 -04:00
Mark Bolwell
9f3d8becf0
Improve logic for 5.3.3.2.x controls
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-22 16:56:51 +00:00
Mark Bolwell
fb73b18596
Add new pwquality dicovery & title update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-22 08:53:02 +00:00
Mark Bolwell
82f7b53a67
Merge branch 'lint_dec24' into alignment
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 13:36:08 +00:00
Mark Bolwell
fcf9eb674f
lint and best practise
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 11:20:19 +00:00
Mark Bolwell
3545620db8
udpated variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 10:22:44 +00:00
Mark Bolwell
d850fc5875
Updated mountpoint vars correctly
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 10:09:31 +00:00
Mark Bolwell
fd97459b6a
Updated mountpoints controls
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-10 17:29:27 +00:00
Mark Bolwell
2de8a39cdc
updated yamllint, company naming, linting and spacing
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-04 12:00:12 +00:00
Mark Bolwell
fa13b06b1f
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-11-04 17:15:33 +00:00
Mark Bolwell
68921be0b2
updated for gui discovery and dconf install
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-10-22 10:38:26 +01:00
Mark Bolwell
7c4c3f9e4d
renamed variable and updated tag
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-09-06 14:49:41 +01:00
Mark Bolwell
2a7d08da08
improvements
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-08-07 10:31:31 +01:00
Mark Bolwell
6ea105374a
Initial v2
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-07-24 14:03:12 +01:00
Mark Bolwell
2bf67cde0d
Added Nist values
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-07-22 12:42:39 +01:00
Mark Bolwell
8b58d71e4b
section1 v2 initial
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-07-19 17:01:23 +01:00
Mark Bolwell
b279a9fb80
Added /dev/null to exclude in prelim check shell
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-06-05 08:00:02 +01:00
uk-bolly
f8fcfe0e78
April_24 updates (#201)
* Issue #170, PR #181 thanks to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* issue #182, PR #183 thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PR #180 thanks to @ipruteanu-sie and @raabf

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Addressed PR #165 thanks to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PT #184 addressed thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated credits

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* typo and ssh allow_deny comments

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* enable OS check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PR - #198 addressed thanks to @brakkio86

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Addressed issue #190

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Additional vars for issue #190

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated pre-commit version

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* consistent quotes around mode

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* moved audit added discoveries

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* removed unneeded vars

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* audit moved to prelim

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tidy up

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* improved new variable usage

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed logic 6.2.10

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* addressed #197 thanks to @mark-tomich

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updates for audit section

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed naming

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* added prelim to includes

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-04-15 14:02:07 +01:00
uk-bolly
7d7b6132f4
March 24 to devel (#186)
* Issue #170, PR #181 thanks to @ipruteanu-sie

* issue #182, PR #183 thansk to @ipruteanu-sie

* PR #180 thanks to @ipruteanu-sie and @raabf

* Addressed PR #165 thanks to @ipruteanu-sie

* PT #184 addressed thansk to @ipruteanu-sie

* updated credits

* typo and ssh allow_deny comments

* enable OS check

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-03-06 16:52:38 +00:00
uk-bolly
0f58436212
Gpg import for rhel servers (#185)
* change logic thanks to @rjacobs1990 see #175

* 1.2.1 force gpg import rhel

* fix missing facts

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-03-06 09:10:06 +00:00
uk-bolly
40bc7aa082
Feb24 updates (#179)
* change logic thanks to @rjacobs1990 see #175

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* thanks to @ipruteani-sie #134

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Thanks to @stwongst #125

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* thanks to @sgomez86 #146

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Added updates from #115

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* removed rp_filter in post added in error

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated yamllint precommit

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated fqcn fo json_query

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fix typo for virt type query

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-02-20 15:43:43 +00:00
Mark Bolwell
e82b2cefac
quoted file mode
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-21 16:25:59 +01:00
Mark Bolwell
04cb2e0f1d
#54 merged into new layout
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-06 08:44:23 +01:00
Mark Bolwell
194925be2f
consistent vars and names
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-06-07 09:24:32 +01:00