Commit graph

1383 commits

Author SHA1 Message Date
uk-bolly
871c75d09e
Merge pull request #437 from defnotyujine/fix-5.3.3.2.7
Updated Jinja template to fix compliance issues for control 5.3.3.2.7
2026-03-18 17:45:13 +00:00
uk-bolly
ab6254aa7a
Merge pull request #436 from defnotyujine/fix_5.1.10_5.1.11
Added always tag to ensure variable exists on CIS profile tag-based e…
2026-03-18 17:43:04 +00:00
defnotyujine
e6ccdea365
Updated Jinja template to fix compliance issues for control 5.3.3.2.7
Signed-off-by: defnotyujine <batauling1000@gmail.com>
2026-03-09 19:19:02 +08:00
defnotyujine
83cf830f36
Added always tag to ensure variable exists on CIS profile tag-based execution
Signed-off-by: defnotyujine <batauling1000@gmail.com>
2026-03-09 17:39:10 +08:00
uk-bolly
497b3dc8d9
Merge pull request #433 from ansible-lockdown/pre-commit-ci-update-config
Some checks failed
Export Public Repo Badges / export-badges (push) Has been cancelled
[pre-commit.ci] pre-commit autoupdate
2026-03-03 09:55:07 +00:00
pre-commit-ci[bot]
e6ba3cea4a
[pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/ansible-community/ansible-lint: v26.1.1 → v26.2.0](https://github.com/ansible-community/ansible-lint/compare/v26.1.1...v26.2.0)
2026-03-02 17:47:33 +00:00
Frederick Witty
587dfb40cf
Merge pull request #429 from ansible-lockdown/pub_feb26_updates
Some checks failed
Export Public Repo Badges / export-badges (push) Has been cancelled
Pub feb26 updates
2026-02-12 10:14:46 -05:00
Mark Bolwell
25b9934ce0
removed dup key
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-12 12:17:31 +00:00
uk-bolly
3015e2fe2f
Merge branch 'devel' into pub_feb26_updates
Signed-off-by: uk-bolly <69214557+uk-bolly@users.noreply.github.com>
2026-02-12 09:54:10 +00:00
Mark Bolwell
032c75924e
Tidy up 5.3.2.1
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-12 09:49:52 +00:00
Mark Bolwell
98e89d8945
Latest fixes updates Feb26
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-12 09:15:05 +00:00
Frederick Witty
3cfcf00717
Merge pull request #63 from ansible-lockdown/Feb26_updates
Update .j2 branding
2026-02-11 17:01:56 -05:00
Frederick Witty
f413385208
Update .j2 branding
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-02-11 15:39:59 -05:00
Frederick Witty
4aa09d558f
Merge pull request #61 from ansible-lockdown/Feb26_updates
2026 Feb QA Fixes
2026-02-11 15:19:20 -05:00
Frederick Witty
71206432be
QA fixes and rollback of audit_only logic
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-02-11 14:54:30 -05:00
uk-bolly
15ebe5500b
Merge pull request #428 from draygoX/devel
Some checks are pending
Export Public Repo Badges / export-badges (push) Waiting to run
Move rhel9cis_ipv6_disable_method to a better location
2026-02-11 09:32:37 +00:00
Frederick Witty
11becb32c5
QA Fixes
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-02-10 16:01:05 -05:00
Frederick Witty
a6aa5895d5
Merge pull request #60 from ansible-lockdown/Feb26_updates
Enhance documents for password hash
2026-02-06 10:24:39 -05:00
Mark Bolwell
2863be6c02
tidied up comments to make it simpler
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-06 14:16:29 +00:00
Mark Bolwell
591f0d90f4
Updated comments for password hash and variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-06 12:49:05 +00:00
Frederick Witty
0a77d6859f
Merge pull request #59 from ansible-lockdown/Feb26_updates
Feb26 updates
2026-02-05 16:01:24 -05:00
Mark Bolwell
3442801399
tidy up of variables and warning for bootloader password
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 20:29:37 +00:00
Mark Bolwell
9a3f458db0
Updated bootloader password logic and enabled old methods without change
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 18:10:29 +00:00
Mark Bolwell
9b091984db
updated logic to allow manual hash to be added or filter
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 17:53:55 +00:00
Mark Bolwell
f1786fe20f
added passlib dependency documentation
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 10:39:04 +00:00
Mark Bolwell
83ee942ecf
updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 09:18:36 +00:00
Mark Bolwell
943b570484
incorporated PR 345 thanks to @thulium-drake
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 09:01:55 +00:00
Mark Bolwell
c7567a98ac
fixed tags and audit logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 08:57:45 +00:00
Mark Bolwell
eb9c96f335
Updated Company title
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-01 20:13:34 +00:00
Mark Bolwell
2708a28409
removed schedule tasks
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-01 20:09:48 +00:00
Mark Bolwell
3e27eb88de
Updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-01 20:09:10 +00:00
Mark Bolwell
db0b08762e
fixed typo thats to Eugene @Frequentis
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-01 19:54:22 +00:00
Mark Bolwell
63d2ce7d2d
removed legacy option
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-01 19:53:50 +00:00
draygoX
8126665a02
Move rhel9cis_ipv6_disable_method to a better location
Signed-off-by: draygoX <90591954+draygoX@users.noreply.github.com>
2026-01-30 08:48:00 -06:00
uk-bolly
e6a29ab36d
Merge pull request #426 from ansible-lockdown/pre-commit-ci-update-config
Some checks failed
Export Public Repo Badges / export-badges (push) Has been cancelled
[pre-commit.ci] pre-commit autoupdate
2026-01-22 08:48:58 +00:00
uk-bolly
d3f24d9d94
Merge pull request #420 from bol7742/patch-1
fix: make 5.3.2.2 idempotent with 5.3.3.1.1
2026-01-22 08:48:38 +00:00
pre-commit-ci[bot]
c1f4b780be
[pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/ansible-community/ansible-lint: v25.12.2 → v26.1.1](https://github.com/ansible-community/ansible-lint/compare/v25.12.2...v26.1.1)
- [github.com/adrienverge/yamllint.git: v1.37.1 → v1.38.0](https://github.com/adrienverge/yamllint.git/compare/v1.37.1...v1.38.0)
2026-01-19 17:44:50 +00:00
Frederick Witty
6b986a7352
Merge pull request #57 from ansible-lockdown/2026Jan_Updates
2026 Jan Updates: Public Issue fixes, Lic Year and Linting
2026-01-08 16:41:35 -05:00
Frederick Witty
e65df16f67
Update 3.1.1
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:33:16 -05:00
Frederick Witty
173fbd3254
Linting
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:26:24 -05:00
Frederick Witty
10f88cc1a3
update vars to rhel9
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:13:07 -05:00
Frederick Witty
309ff4cdd7
Fixes from Public Issue 418 and 419 + Lic year
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:08:35 -05:00
Frederick Witty
b2d08552c5
Merge pull request #425 from ansible-lockdown/2026Jan_Updates
Some checks failed
Export Public Repo Badges / export-badges (push) Has been cancelled
2026 Jan Updates
2026-01-08 13:50:20 -05:00
Frederick Witty
02132181e6
update changelog
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 12:24:44 -05:00
Frederick Witty
22a9b085d7
fix for #419, thank you @aaronk1
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 12:23:40 -05:00
Frederick Witty
87cd0f3eb5
fix for #418 and update Lic year
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 09:40:08 -05:00
Frederick Witty
2d02d8b048
Merge pull request #56 from ansible-lockdown/benchmark_v2.0.0
Benchmark v2.0.0 Sync
2025-12-30 14:42:39 -05:00
Frederick Witty
fb74617694
Merge pull request #55 from ansible-lockdown/disable_ipv6_improvements
Update audit vars to add rhel9cis_ipv6_disable_method
2025-12-30 10:19:52 -05:00
Frederick Witty
923cba3ca5
Merge pull request #424 from ansible-lockdown/issue_416_fix
Some checks failed
Export Public Repo Badges / export-badges (push) Has been cancelled
Issue 416: update changelog and ansible_vars_goss
2025-12-30 10:18:50 -05:00
Frederick Witty
5d1143ff87
Update changelog
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2025-12-30 08:21:47 -05:00