* Issue #170, PR #181 thanks to @ipruteanu-sie
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* issue #182, PR #183 thansk to @ipruteanu-sie
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* PR #180 thanks to @ipruteanu-sie and @raabf
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Addressed PR #165 thanks to @ipruteanu-sie
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* PT #184 addressed thansk to @ipruteanu-sie
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated credits
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* typo and ssh allow_deny comments
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* enable OS check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* PR - #198 addressed thanks to @brakkio86
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Addressed issue #190
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Additional vars for issue #190
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated pre-commit version
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* consistent quotes around mode
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* moved audit added discoveries
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* removed unneeded vars
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* audit moved to prelim
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* tidy up
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* improved new variable usage
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* fixed logic 6.2.10
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* addressed #197 thanks to @mark-tomich
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updates for audit section
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* fixed naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* added prelim to includes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
---------
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* change logic thanks to @rjacobs1990 see #175
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* thanks to @ipruteani-sie #134
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Thanks to @stwongst #125
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* thanks to @sgomez86 #146
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Added updates from #115
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* removed rp_filter in post added in error
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated yamllint precommit
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated fqcn fo json_query
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* fix typo for virt type query
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
---------
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
With an AD account there isn't an entry in the /etc/shadow file. This
caused the password length check to treat it as a zero length password.
Now local password check is skipped for AD account.
Also added an additional check for a locked local account for the sudo
user.
Signed-off-by: John Foster <robopickle@proton.me>
* container standards
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* logic on handlers
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* initial container ignore
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* tags and containder discovery
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* logic on auditd task
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* tags and crypto logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* distro update for rocky
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* system_is_container updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* ssh pkg check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* logrotate pkg check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* logic in container check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* add pkg fact and audit conditionals
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* tidy up crypto step
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Added missing tags
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* container vars file now a variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* added uid discovery and usage
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Updated OS checks and conditionals
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* fixed empty become
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* change audit to include task
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* Added OS_specific vars
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated import/include
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* OS Specific vars
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated tags
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* updated changed_when
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* fixed UID logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* changed reboot var
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* changed skip_reboot var name
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* masked only
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* fix logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* remove debug update logic 6.2.8
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* initial
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
* removed CentOS
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
