Commit graph

628 commits

Author SHA1 Message Date
Mark Bolwell
98e89d8945
Latest fixes updates Feb26
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-12 09:15:05 +00:00
Frederick Witty
71206432be
QA fixes and rollback of audit_only logic
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-02-11 14:54:30 -05:00
Frederick Witty
11becb32c5
QA Fixes
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-02-10 16:01:05 -05:00
Mark Bolwell
3442801399
tidy up of variables and warning for bootloader password
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 20:29:37 +00:00
Mark Bolwell
9a3f458db0
Updated bootloader password logic and enabled old methods without change
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 18:10:29 +00:00
Mark Bolwell
9b091984db
updated logic to allow manual hash to be added or filter
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 17:53:55 +00:00
Mark Bolwell
943b570484
incorporated PR 345 thanks to @thulium-drake
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 09:01:55 +00:00
Mark Bolwell
c7567a98ac
fixed tags and audit logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 08:57:45 +00:00
Mark Bolwell
db0b08762e
fixed typo thats to Eugene @Frequentis
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-01 19:54:22 +00:00
Frederick Witty
e65df16f67
Update 3.1.1
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:33:16 -05:00
Frederick Witty
173fbd3254
Linting
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:26:24 -05:00
Frederick Witty
309ff4cdd7
Fixes from Public Issue 418 and 419 + Lic year
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:08:35 -05:00
George Nalen
7ff8e7b6b9
Updated disable IPv6 logic
Signed-off-by: George Nalen <georgen@mindpointgroup.com>
2025-12-23 11:20:21 -05:00
Mark Bolwell
f80c60bb8a
updated with correct fix thanks to @bbaassssiiee
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-12-01 10:41:38 +00:00
Mark Bolwell
ed784d270b
added fix for issues #413 azure locked passwords
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-11-28 14:44:59 +00:00
Mark Bolwell
5354111505
improved audit logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-16 15:27:27 +01:00
Mark Bolwell
a525e4a2fb
Added extra failure for no data
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-16 14:58:06 +01:00
Frederick Witty
724a09f23d
Merge pull request #401 from ansible-lockdown/Oct25_updates
Oct25 updates
2025-10-03 10:17:39 -04:00
Mark Bolwell
6500e39f42
Added fix for #399 thanks to @trumbaut
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-03 08:19:07 +01:00
Mark Bolwell
8f1aba35f6
added fix for public #399
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-03 08:13:35 +01:00
uk-bolly
c69fedcf0a
Merge pull request #398 from trumbaut/fix_rule_3.2.1_reffering_to_cramfs
Update cis_3.2.x.yml (add dccp to blacklist instead of cramfs
2025-10-02 13:42:40 +01:00
Mark Bolwell
fdc0a7afed
fixed typo thanks to @trumbaut #397
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-02 09:20:47 +01:00
Thomas Rumbaut
7aa911b354
Update cis_3.2.x.yml (add dccp to blacklist instead of cramfs
Signed-off-by: Thomas Rumbaut <thomas@rumbaut.be>
2025-10-02 10:06:44 +02:00
Mark Bolwell
383c4651c5
added public fix #396
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-01 17:44:17 +01:00
polski-g
319c7a8fbb
ensure check mode runs all non-destructive tasks
Signed-off-by: polski-g <polski_g@sent.at>
2025-10-01 09:44:03 -04:00
Mark Bolwell
81eadd4a6f
max-concurrent audit option added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-01 12:59:44 +01:00
Mark Bolwell
d2b371432e
issue #393 addressed thanks to @fragglexarmy
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-01 10:32:52 +01:00
Mark Bolwell
d63f58972d
fixed typo
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-01 10:32:24 +01:00
uk-bolly
7314d7b092
Merge pull request #394 from dbeuker/devel
Suggestion for the missing assert parameter
2025-10-01 10:25:22 +01:00
uk-bolly
23b60bc629
Merge pull request #390 from polski-g/modular_section_5_r2
Support section modularization (for Sec 5 only right now)
2025-10-01 10:24:44 +01:00
uk-bolly
3e848dd6f1
Merge pull request #386 from polski-g/regex_5_3_2_2
5.3.2.2: fix regex failing to match whitespace
2025-10-01 10:24:13 +01:00
Mark Bolwell
5f64ccd843
5.3.2.1 updated var naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 15:20:23 +01:00
Mark Bolwell
0d56df1eda
5.4.1.3 typo fix thanks to @fragglexarmy
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:53:17 +01:00
Mark Bolwell
7769bec99e
Added section5 subsections public #390 thanks to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:44:57 +01:00
Mark Bolwell
caffb14671
applied latest fix from public #386 thansk to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:38:45 +01:00
Mark Bolwell
5dd64ebdb8
max concurrent options and default added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:20:10 +01:00
Mark Bolwell
9a113ea4a8
fix pre-commit var naming for authselect
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:17:08 +01:00
Danny Beuker
03d42ba8ce
Suggestion for the missing assert parameter
Signed-off-by: Danny Beuker <dannybeuker@proton.me>
2025-09-22 10:02:50 +02:00
polski-g
2557470054
5.3.2.2: fix regex failing to match whitespace
Fixed yamllint (colons) issues

Signed-off-by: polski-g <polski_g@sent.at>
2025-09-15 13:04:29 -04:00
polski-g
392c3f9016
Support section 5 modularization
corrected trailing whitespace

Signed-off-by: polski-g <polski_g@sent.at>
2025-09-15 12:59:41 -04:00
Frederick Witty
d927b3006d
linting clean up
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-11 16:05:24 -04:00
Frederick Witty
67c574d8a9
Updates from Public
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-10 12:57:50 -04:00
Fred W.
374b9a5dc0
Merge pull request #391 from polski-g/check_mode_1_4_2
1.4.2: grep command should run in check_mode
2025-09-10 08:51:33 -04:00
Fred W.
92bba62586
Merge pull request #385 from polski-g/check_mode_5_4_1_1
5.4.1.1: shell command should run in check_mode
2025-09-10 08:50:49 -04:00
Frederick Witty
e61cafb59b
addressed issue #387, thank you @fragglexarmy
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-09 15:59:30 -04:00
Frederick Witty
5794114b3e
Update prelim logic to address #382
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-09 15:12:01 -04:00
Frederick Witty
2dfa9266a8
Update cryto policy var to standard
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-08 11:54:57 -04:00
Frederick Witty
413ccb96b7
Update cryto policy based controls with improved logic
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-05 16:39:55 -04:00
Frederick Witty
b0ec6c4820
Fix for #384, thank you @polski-g
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-05 16:24:11 -04:00
polski-g
1c9c1b919c
1.4.2: grep command should run in check_mode
Signed-off-by: polski-g <polski_g@sent.at>
2025-09-03 09:55:00 -04:00