121 commits

Author	SHA1	Message	Date
Mark Bolwell	9a3f458db0	Updated bootloader password logic and enabled old methods without change ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2026-02-05 18:10:29 +00:00
Mark Bolwell	9b091984db	updated logic to allow manual hash to be added or filter ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2026-02-05 17:53:55 +00:00
Mark Bolwell	943b570484	incorporated PR 345 thanks to @thulium-drake ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2026-02-03 09:01:55 +00:00
Frederick Witty	173fbd3254	Linting ... Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>	2026-01-08 14:26:24 -05:00
George Nalen	7ff8e7b6b9	Updated disable IPv6 logic ... Signed-off-by: George Nalen <georgen@mindpointgroup.com>	2025-12-23 11:20:21 -05:00
Mark Bolwell	727ae4515b	updated auditd variables ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-10-16 14:57:24 +01:00
Mark Bolwell	7769bec99e	Added section5 subsections public #390 thanks to @polski-g ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-09-30 14:44:57 +01:00
Mark Bolwell	5dd64ebdb8	max concurrent options and default added ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-09-30 14:20:10 +01:00
Frederick Witty	67c574d8a9	Updates from Public ... Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>	2025-09-10 12:57:50 -04:00
Mark Bolwell	73320db603	dont not run section 1.8 if not gdm PR #364 from public ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-08-14 16:17:45 +01:00
Mark Bolwell	82cc458d7a	Fix logic and notes for in crypto policy building ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-06-20 11:32:31 +01:00
Mark Bolwell	f2c03f1e68	variable networkmanager package and typo fixes ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-05-28 16:11:36 +01:00
Frederick Witty	23b2909073	QA Fixes ... Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>	2025-05-15 16:48:44 -04:00
Fred W.	1d266e61a7	Merge pull request #25 from ansible-lockdown/benchmark_v2.0.0 ... Benchmark v2.0.0	2025-05-09 15:12:17 -04:00
Fred W.	2c35f64f38	Merge pull request #24 from ansible-lockdown/devel ... May 2025 devel to latest alignment	2025-05-09 14:51:13 -04:00
Frederick Witty	120207440c	Typo fixes ... Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>	2025-04-15 15:22:19 -04:00
Mark Bolwell	e5f923c9be	Merge branch 'updates' into benchmark_v2.0.0 ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-04-15 14:30:05 +01:00
Mark Bolwell	4aeac7e662	typos and tidy up ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-04-15 11:41:46 +01:00
Mark Bolwell	7a3efd4920	added fetch and ansible facts ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-04-01 09:56:51 +01:00
Mark Bolwell	9bbf5b7a81	updated var name to remove capital ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-04-01 08:08:28 +01:00
Mark Bolwell	576531e986	fetch audit and compliance facts added ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-03-31 14:50:40 +01:00
Mark Bolwell	4d8cc6eb60	updated minclass ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-02-26 14:04:22 +00:00
Mark Bolwell	3441894ab4	Lint update ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-02-20 11:55:59 +00:00
Mark Bolwell	d6a560b2c8	rsyslog_#294 thanks to @alopezgcp ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-02-20 11:54:14 +00:00
Mark Bolwell	2078657ceb	added fix for #293 thanks to @machikanta ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-02-20 10:22:11 +00:00
Mark Bolwell	52c1a41434	fixed aide db name ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-12-18 08:51:13 +00:00
Mark Bolwell	fd97459b6a	Updated mountpoints controls ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-12-10 17:29:27 +00:00
Mark Bolwell	2827c752ac	aide variablizing ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-12-10 16:45:49 +00:00
Mark Bolwell	f02a9d442f	added system account enhancement 5.4.2.7 thanks to @Thulium-Drake ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-11-11 17:35:12 +00:00
uk-bolly	98795d440c	Merge pull request #7 from ansible-lockdown/gui_updates ... updated for gui discovery and dconf install	2024-10-22 14:05:35 +01:00
Mark Bolwell	68921be0b2	updated for gui discovery and dconf install ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-10-22 10:38:26 +01:00
Mark Bolwell	37e13df44a	lint ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-09-09 14:01:21 +01:00
Mark Bolwell	e915a7ae5d	added missing variable ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-09-09 12:36:58 +01:00
Mark Bolwell	7c4c3f9e4d	renamed variable and updated tag ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-09-06 14:49:41 +01:00
Mark Bolwell	671ba154e7	linting updates ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-08-09 13:47:38 +01:00
Mark Bolwell	ccac707ddb	Added missing control ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-08-09 13:29:44 +01:00
Mark Bolwell	fd3b9703e3	tidy up and realign ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-08-09 13:14:56 +01:00
Mark Bolwell	89345c12f8	rename snmp var ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-08-09 13:13:35 +01:00
Mark Bolwell	565ef20715	updated authselect logic ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-08-08 11:08:09 +01:00
Mark Bolwell	0fc418a222	v2 improvements ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-08-07 10:29:03 +01:00
Mark Bolwell	6d2c9e67e9	Added new options rsyslog logrotate ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-08-06 17:28:39 +01:00
Mark Bolwell	a36a84c5ea	lint and v2 initial ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-07-24 14:02:05 +01:00
Mark Bolwell	e1579c8127	fix typo ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-07-23 08:46:27 +01:00
Mark Bolwell	3a027af304	section 2 updates ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-07-23 08:20:09 +01:00
Mark Bolwell	8b58d71e4b	section1 v2 initial ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-07-19 17:01:23 +01:00
Mark Bolwell	62baec6d16	changed to default bootloader hash ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-07-12 12:37:45 +01:00
Svennd	f11d2cc3f0	typo ... a small description typo Signed-off-by: Svennd <svenn.dhert@uantwerpen.be>	2024-04-30 16:16:16 +02:00
uk-bolly	f8fcfe0e78	April_24 updates (#201) ... * Issue #170, PR #181 thanks to @ipruteanu-sie Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * issue #182, PR #183 thansk to @ipruteanu-sie Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * PR #180 thanks to @ipruteanu-sie and @raabf Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * Addressed PR #165 thanks to @ipruteanu-sie Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * PT #184 addressed thansk to @ipruteanu-sie Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * updated credits Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * typo and ssh allow_deny comments Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * enable OS check Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * PR - #198 addressed thanks to @brakkio86 Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * Addressed issue #190 Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * Additional vars for issue #190 Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * updated pre-commit version Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * consistent quotes around mode Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * moved audit added discoveries Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * removed unneeded vars Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * audit moved to prelim Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * tidy up Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * improved new variable usage Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * fixed logic 6.2.10 Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * updated Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * addressed #197 thanks to @mark-tomich Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * updates for audit section Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * fixed naming Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * updated Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * added prelim to includes Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> --------- Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-04-15 14:02:07 +01:00
uk-bolly	7d7b6132f4	March 24 to devel (#186) ... * Issue #170, PR #181 thanks to @ipruteanu-sie * issue #182, PR #183 thansk to @ipruteanu-sie * PR #180 thanks to @ipruteanu-sie and @raabf * Addressed PR #165 thanks to @ipruteanu-sie * PT #184 addressed thansk to @ipruteanu-sie * updated credits * typo and ssh allow_deny comments * enable OS check --------- Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-03-06 16:52:38 +00:00
uk-bolly	0f58436212	Gpg import for rhel servers (#185) ... * change logic thanks to @rjacobs1990 see #175 * 1.2.1 force gpg import rhel * fix missing facts --------- Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2024-03-06 09:10:06 +00:00