ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-27 23:43:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
714 commits 5 branches 14 tags 2.6 MiB
Commit graph

714 commits

This branch
This branch
All branches
Author SHA1 Message Date
Ionut Pruteanu
7bab634a45
Updating the testfile with documented findings 2024-01-25 10:31:11 +02:00
Ionut Pruteanu
e780e076d1
Merge branch 'siemens/feat/document_main_variables' into siemens/rhel9/devel 2024-01-19 20:01:18 +02:00
root@DERVISHx
da62626a9d
Fixing conflicts after rebasing current feature branch onto 'devel' 2024-01-19 19:59:32 +02:00
Marcin Dulinski
9ce1fb6556
Solved minor conflicts in defaults/main.yml file, when re-basing 
Signed-off-by: Marcin Dulinski <martin@dulin.me.uk>
 2024-01-19 19:59:04 +02:00
Ionut Pruteanu
221f64da14
Merge branch 'siemens/rhel9/devel' of code.siemens.com:infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/rhel9/devel 2024-01-19 19:47:15 +02:00
Ionut Pruteanu
b931555eb2
As Nuno discovered, I was accidentally adding a new line(un-needed) 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 19:46:30 +02:00
Ionut Pruteanu
cd116a59b7
Using again sfera_automation_pipeline's master branch 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 19:46:30 +02:00
Ionut Pruteanu
89d1373373
Adding newest test results for L2(rebasing siemens/rhel9/devel onto devel) 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 19:45:52 +02:00
Ionut Pruteanu
b89fa21c0a
new branch in Sfera_automation_pipeline, OIDC-testing 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 19:43:34 +02:00
Ionut Pruteanu
06b39c0683
Fixing conflicts after rebasing branch:"/siemens/rhel9/devel" onto up-to-date "devel" branch 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 19:41:41 +02:00
root@DERVISHx
d6ae2b6d36
Merge branch 'siemens/rhel9/devel' of code.siemens.com:infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/rhel9/devel 2024-01-19 18:58:56 +02:00
Ionut Pruteanu
5cb6108e18
As Nuno discovered, I was accidentally adding a new line(un-needed) 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:56 +02:00
Ionut Pruteanu
c2630dcb65
Using again sfera_automation_pipeline's master branch 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:56 +02:00
Ionut Pruteanu
d62e60d235
Adding newest test results for L2. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:56 +02:00
Ionut Pruteanu
a52d2a62ec
new branch in Sfera_automation_pipeline, OIDC-testing 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:56 +02:00
Ionut Pruteanu
19693c08de
Naming the Ansible vars in tesfile properly, with respect to rhel9 tasks. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:56 +02:00
Ionut Pruteanu
6ef4e38674
As Nuno discovered, I was accidentally adding a new line(un-needed) 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:55 +02:00
Ionut Pruteanu
9614e9d7e1
Adding testfile with L1. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:55 +02:00
Ionut Pruteanu
7190ecb573
Using again sfera_automation_pipeline's master branch 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:55 +02:00
Ionut Pruteanu
3dde4b1c78
Adding CI file 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:55 +02:00
Ionut Pruteanu
3724f3f830
Adding newest test results for L2. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:55 +02:00
Ionut Pruteanu
17592cc608
new branch in Sfera_automation_pipeline, OIDC-testing 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:55 +02:00
Ionut Pruteanu
f5b2299c79
Naming the Ansible vars in tesfile properly, with respect to rhel9 tasks. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:55 +02:00
Ionut Pruteanu
dfffb19e4c
Adding testfile with L1. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 18:58:55 +02:00
Ionut Pruteanu
36ab51d600
Removing not useful line from docs 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 16:16:18 +02:00
Ionut Pruteanu
48f0c7db53
Using again the default values used by Lockdown for sshd vars, as they shouldn't be altered 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 16:11:02 +02:00
Ionut Pruteanu
073f6b7192
Revert "Added vars for streams." 
[IP] I see no benefit to duplicate vars in defaults/main.yml in other files like specific vars for Alma/Rocky, especially since
we're using the same values for those vars. Also, replacing rsyslog with journald is not fine for this current doc-extension proposal.

This reverts commit a57333dcf1.
 2024-01-19 15:55:42 +02:00
Ionut Pruteanu
b4bef292ca
Improving doc for journald log parameters. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 15:37:44 +02:00
Ionut Pruteanu
8fc85fcc59
Documenting usage of chrony variables. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-19 15:32:01 +02:00
Ionut Pruteanu
677424d853
Merge branch 'devel' of github.com:siemens/RHEL9-CIS into siemens/feat/document_main_variables 2024-01-19 11:03:46 +02:00
uk-bolly
068c45f509
Merge pull request #105 from siemens/siemens/feat/reverse_path_filtering_3_3_7 
Adding missing lines to usr: sysctl.d/50-default.conf
 2024-01-18 13:15:28 +00:00
Ionut Pruteanu
14cd1e0397
Merge branch 'siemens/feat/document_main_variables' of code.siemens.com:infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/feat/document_main_variables 2024-01-17 20:39:49 +02:00
Ionut Pruteanu
560475ea4e
Finalising the docs content & syntax 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-17 20:17:21 +02:00
uk-bolly
200b2c244b
Merge pull request #152 from jLemmings/patch-1 
Remove trailing comma to align with other roles
 2024-01-09 16:48:20 +00:00
Joshua Hemmings
d73f26a7ab
Remove trailing comma to align with other roles 
Signed-off-by: Joshua Hemmings <josh@hemmings.ch>
 2024-01-09 09:17:00 +01:00
root@DERVISHx
a57333dcf1
Added vars for streams. 
Signed-off-by: root@DERVISHx <nuno.carvalho@siemens.com>
 2023-12-27 15:39:46 +00:00
uk-bolly
6f8a95c73a
Merge pull request #143 from siemens/siemens/feat/4.2.1.3conditionalAndSectionHeader 
Siemens/feat/4.2.1.3conditional and section header
 2023-12-21 08:40:41 +00:00
uk-bolly
e545b89c7b
Merge pull request #145 from siemens/siemens/feat/5.4.2_addVarUsage 
Using rhel9cis_authselect['options'], otherwise not used at all
 2023-12-21 08:39:48 +00:00
uk-bolly
145ac85e52
Merge pull request #103 from Corey0219/update-4-2-3 
find hidden files in /var/log for 4.3.2
 2023-12-20 09:48:47 +00:00
Corey Reid
8d85f178e2
find hidden files in /var/log for 4.3.2 
Signed-off-by: Corey Reid <corey.nathan.reid@gmail.com>
 2023-12-17 17:36:34 +00:00
uk-bolly
c56ea1ac9a
Merge pull request #140 from siemens/siemens/feat/3.4.2.5_fixConditional 
3.4.2.5 conditional fix
 2023-12-13 08:44:08 +00:00
uk-bolly
82d1c2bdfb
Merge pull request #138 from siemens/siemens/feat/2.3.4_fixConditional 
Using correct conditional for ftpd
 2023-12-13 08:43:07 +00:00
uk-bolly
779c90ea0e
Merge pull request #136 from siemens/siemens/feat/2.2.16_fixingNFSLogicBetweenMaskingServiceVsRemovingPackage 
Masking service when server package is needed
 2023-12-13 08:42:33 +00:00
uk-bolly
74f21e5303
Merge pull request #133 from siemens/siemens/feat/timeoutValueDefinedNotUsed 
Timeout value defined in defaults/main.yml file not used
 2023-12-13 08:40:02 +00:00
uk-bolly
ecbd514df1
Merge pull request #129 from siemens/siemens/feat/removingRedundantConditionals 
Removing redundant conditional statements
 2023-12-13 08:27:49 +00:00
uk-bolly
998eaf30ba
Merge pull request #121 from dulin/fix-chrony 
Fixed chrony configuration options
 2023-12-13 08:23:13 +00:00
uk-bolly
d022977723
Merge pull request #127 from ansible-lockdown/pre-commit-ci-update-config 
[pre-commit.ci] pre-commit autoupdate
 2023-12-13 08:20:34 +00:00
uk-bolly
b7936bc633
Merge pull request #122 from senihucar/patch-1 
Update cis_5.6.1.x.yml
 2023-12-13 08:19:58 +00:00
Ionut Pruteanu
28a61fa71d
Last docs part - additions 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2023-12-08 20:17:43 +02:00
Ionut Pruteanu
c19e350b7d
Using rhel9cis_authselect['options'], otherwise not used at all 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2023-12-08 16:44:30 +02:00