Michael Hicks
|
6088396b8a
|
Merge c88d3dec49 into eedb2188c3
|
2026-03-24 09:11:06 +08:00 |
|
uk-bolly
|
eedb2188c3
|
Merge pull request #438 from ansible-lockdown/pre-commit-ci-update-config
Export Public Repo Badges / export-badges (push) Has been cancelled
[pre-commit.ci] pre-commit autoupdate
|
2026-03-18 17:46:10 +00:00 |
|
uk-bolly
|
5e8ff2dc4a
|
Merge pull request #439 from defnotyujine/fix_5.2.4
Added missing variable for task 5.2.4
|
2026-03-18 17:45:55 +00:00 |
|
uk-bolly
|
871c75d09e
|
Merge pull request #437 from defnotyujine/fix-5.3.3.2.7
Updated Jinja template to fix compliance issues for control 5.3.3.2.7
|
2026-03-18 17:45:13 +00:00 |
|
uk-bolly
|
ab6254aa7a
|
Merge pull request #436 from defnotyujine/fix_5.1.10_5.1.11
Added always tag to ensure variable exists on CIS profile tag-based e…
|
2026-03-18 17:43:04 +00:00 |
|
pre-commit-ci[bot]
|
decb9061d5
|
[pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/gitleaks/gitleaks: v8.30.0 → v8.30.1](https://github.com/gitleaks/gitleaks/compare/v8.30.0...v8.30.1)
- [github.com/ansible-community/ansible-lint: v26.2.0 → v26.3.0](https://github.com/ansible-community/ansible-lint/compare/v26.2.0...v26.3.0)
|
2026-03-16 17:45:10 +00:00 |
|
defnotyujine
|
ce40cd630c
|
Added missing variable for task 5.2.4
Signed-off-by: defnotyujine <batauling1000@gmail.com>
|
2026-03-10 17:33:08 +08:00 |
|
defnotyujine
|
e6ccdea365
|
Updated Jinja template to fix compliance issues for control 5.3.3.2.7
Signed-off-by: defnotyujine <batauling1000@gmail.com>
|
2026-03-09 19:19:02 +08:00 |
|
defnotyujine
|
83cf830f36
|
Added always tag to ensure variable exists on CIS profile tag-based execution
Signed-off-by: defnotyujine <batauling1000@gmail.com>
|
2026-03-09 17:39:10 +08:00 |
|
Michael Hicks
|
c88d3dec49
|
fixed extra line based yaml lint failing issue
Signed-off-by: Michael Hicks <nooneofconsequence@gmail.com>
|
2026-03-04 11:42:11 -08:00 |
|
Michael Hicks
|
c4a97079b1
|
added guardrails on enabled and state flags to systemd mask tasks to only disable and stop when the package is installed, otherwise just mask to prevent the service from ever starting should it get installed at a later time. This allows hardening to proceed when the service doesn't exist but masking has been requested. Otherwise the playbook run will fail at a step when the service which comes with the package doesn't already exist
Signed-off-by: Michael Hicks <nooneofconsequence@gmail.com>
|
2026-03-04 11:42:10 -08:00 |
|
uk-bolly
|
497b3dc8d9
|
Merge pull request #433 from ansible-lockdown/pre-commit-ci-update-config
Export Public Repo Badges / export-badges (push) Has been cancelled
[pre-commit.ci] pre-commit autoupdate
|
2026-03-03 09:55:07 +00:00 |
|
pre-commit-ci[bot]
|
e6ba3cea4a
|
[pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/ansible-community/ansible-lint: v26.1.1 → v26.2.0](https://github.com/ansible-community/ansible-lint/compare/v26.1.1...v26.2.0)
|
2026-03-02 17:47:33 +00:00 |
|
Frederick Witty
|
587dfb40cf
|
Merge pull request #429 from ansible-lockdown/pub_feb26_updates
Export Public Repo Badges / export-badges (push) Has been cancelled
Pub feb26 updates
|
2026-02-12 10:14:46 -05:00 |
|
Mark Bolwell
|
25b9934ce0
|
removed dup key
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-12 12:17:31 +00:00 |
|
uk-bolly
|
3015e2fe2f
|
Merge branch 'devel' into pub_feb26_updates
Signed-off-by: uk-bolly <69214557+uk-bolly@users.noreply.github.com>
|
2026-02-12 09:54:10 +00:00 |
|
Mark Bolwell
|
032c75924e
|
Tidy up 5.3.2.1
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-12 09:49:52 +00:00 |
|
Mark Bolwell
|
98e89d8945
|
Latest fixes updates Feb26
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-12 09:15:05 +00:00 |
|
Frederick Witty
|
3cfcf00717
|
Merge pull request #63 from ansible-lockdown/Feb26_updates
Update .j2 branding
|
2026-02-11 17:01:56 -05:00 |
|
Frederick Witty
|
f413385208
|
Update .j2 branding
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
|
2026-02-11 15:39:59 -05:00 |
|
Frederick Witty
|
4aa09d558f
|
Merge pull request #61 from ansible-lockdown/Feb26_updates
2026 Feb QA Fixes
|
2026-02-11 15:19:20 -05:00 |
|
Frederick Witty
|
71206432be
|
QA fixes and rollback of audit_only logic
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
|
2026-02-11 14:54:30 -05:00 |
|
uk-bolly
|
15ebe5500b
|
Merge pull request #428 from draygoX/devel
Export Public Repo Badges / export-badges (push) Waiting to run
Move rhel9cis_ipv6_disable_method to a better location
|
2026-02-11 09:32:37 +00:00 |
|
Frederick Witty
|
11becb32c5
|
QA Fixes
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
|
2026-02-10 16:01:05 -05:00 |
|
Frederick Witty
|
a6aa5895d5
|
Merge pull request #60 from ansible-lockdown/Feb26_updates
Enhance documents for password hash
|
2026-02-06 10:24:39 -05:00 |
|
Mark Bolwell
|
2863be6c02
|
tidied up comments to make it simpler
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-06 14:16:29 +00:00 |
|
Mark Bolwell
|
591f0d90f4
|
Updated comments for password hash and variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-06 12:49:05 +00:00 |
|
Frederick Witty
|
0a77d6859f
|
Merge pull request #59 from ansible-lockdown/Feb26_updates
Feb26 updates
|
2026-02-05 16:01:24 -05:00 |
|
Mark Bolwell
|
3442801399
|
tidy up of variables and warning for bootloader password
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-05 20:29:37 +00:00 |
|
Mark Bolwell
|
9a3f458db0
|
Updated bootloader password logic and enabled old methods without change
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-05 18:10:29 +00:00 |
|
Mark Bolwell
|
9b091984db
|
updated logic to allow manual hash to be added or filter
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-05 17:53:55 +00:00 |
|
Mark Bolwell
|
f1786fe20f
|
added passlib dependency documentation
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-05 10:39:04 +00:00 |
|
Mark Bolwell
|
83ee942ecf
|
updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-03 09:18:36 +00:00 |
|
Mark Bolwell
|
943b570484
|
incorporated PR 345 thanks to @thulium-drake
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-03 09:01:55 +00:00 |
|
Mark Bolwell
|
c7567a98ac
|
fixed tags and audit logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-03 08:57:45 +00:00 |
|
Mark Bolwell
|
eb9c96f335
|
Updated Company title
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-01 20:13:34 +00:00 |
|
Mark Bolwell
|
2708a28409
|
removed schedule tasks
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-01 20:09:48 +00:00 |
|
Mark Bolwell
|
3e27eb88de
|
Updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-01 20:09:10 +00:00 |
|
Mark Bolwell
|
db0b08762e
|
fixed typo thats to Eugene @Frequentis
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-01 19:54:22 +00:00 |
|
Mark Bolwell
|
63d2ce7d2d
|
removed legacy option
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2026-02-01 19:53:50 +00:00 |
|
draygoX
|
8126665a02
|
Move rhel9cis_ipv6_disable_method to a better location
Signed-off-by: draygoX <90591954+draygoX@users.noreply.github.com>
|
2026-01-30 08:48:00 -06:00 |
|
uk-bolly
|
e6a29ab36d
|
Merge pull request #426 from ansible-lockdown/pre-commit-ci-update-config
Export Public Repo Badges / export-badges (push) Has been cancelled
[pre-commit.ci] pre-commit autoupdate
|
2026-01-22 08:48:58 +00:00 |
|
uk-bolly
|
d3f24d9d94
|
Merge pull request #420 from bol7742/patch-1
fix: make 5.3.2.2 idempotent with 5.3.3.1.1
|
2026-01-22 08:48:38 +00:00 |
|
pre-commit-ci[bot]
|
c1f4b780be
|
[pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/ansible-community/ansible-lint: v25.12.2 → v26.1.1](https://github.com/ansible-community/ansible-lint/compare/v25.12.2...v26.1.1)
- [github.com/adrienverge/yamllint.git: v1.37.1 → v1.38.0](https://github.com/adrienverge/yamllint.git/compare/v1.37.1...v1.38.0)
|
2026-01-19 17:44:50 +00:00 |
|
Frederick Witty
|
6b986a7352
|
Merge pull request #57 from ansible-lockdown/2026Jan_Updates
2026 Jan Updates: Public Issue fixes, Lic Year and Linting
|
2026-01-08 16:41:35 -05:00 |
|
Frederick Witty
|
e65df16f67
|
Update 3.1.1
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
|
2026-01-08 14:33:16 -05:00 |
|
Frederick Witty
|
173fbd3254
|
Linting
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
|
2026-01-08 14:26:24 -05:00 |
|
Frederick Witty
|
10f88cc1a3
|
update vars to rhel9
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
|
2026-01-08 14:13:07 -05:00 |
|
Frederick Witty
|
309ff4cdd7
|
Fixes from Public Issue 418 and 419 + Lic year
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
|
2026-01-08 14:08:35 -05:00 |
|
Frederick Witty
|
b2d08552c5
|
Merge pull request #425 from ansible-lockdown/2026Jan_Updates
Export Public Repo Badges / export-badges (push) Has been cancelled
2026 Jan Updates
|
2026-01-08 13:50:20 -05:00 |
|