Commit graph

584 commits

Author SHA1 Message Date
Mark Bolwell
9a3f458db0
Updated bootloader password logic and enabled old methods without change
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 18:10:29 +00:00
Mark Bolwell
9b091984db
updated logic to allow manual hash to be added or filter
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 17:53:55 +00:00
Mark Bolwell
943b570484
incorporated PR 345 thanks to @thulium-drake
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 09:01:55 +00:00
Mark Bolwell
c7567a98ac
fixed tags and audit logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 08:57:45 +00:00
Mark Bolwell
db0b08762e
fixed typo thats to Eugene @Frequentis
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-01 19:54:22 +00:00
Frederick Witty
e65df16f67
Update 3.1.1
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:33:16 -05:00
Frederick Witty
173fbd3254
Linting
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:26:24 -05:00
Frederick Witty
309ff4cdd7
Fixes from Public Issue 418 and 419 + Lic year
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-01-08 14:08:35 -05:00
George Nalen
7ff8e7b6b9
Updated disable IPv6 logic
Signed-off-by: George Nalen <georgen@mindpointgroup.com>
2025-12-23 11:20:21 -05:00
Mark Bolwell
f80c60bb8a
updated with correct fix thanks to @bbaassssiiee
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-12-01 10:41:38 +00:00
Mark Bolwell
ed784d270b
added fix for issues #413 azure locked passwords
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-11-28 14:44:59 +00:00
Mark Bolwell
a525e4a2fb
Added extra failure for no data
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-16 14:58:06 +01:00
Mark Bolwell
8f1aba35f6
added fix for public #399
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-03 08:13:35 +01:00
Mark Bolwell
fdc0a7afed
fixed typo thanks to @trumbaut #397
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-02 09:20:47 +01:00
Mark Bolwell
383c4651c5
added public fix #396
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-10-01 17:44:17 +01:00
Mark Bolwell
5f64ccd843
5.3.2.1 updated var naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 15:20:23 +01:00
Mark Bolwell
0d56df1eda
5.4.1.3 typo fix thanks to @fragglexarmy
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:53:17 +01:00
Mark Bolwell
7769bec99e
Added section5 subsections public #390 thanks to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:44:57 +01:00
Mark Bolwell
caffb14671
applied latest fix from public #386 thansk to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:38:45 +01:00
Mark Bolwell
5dd64ebdb8
max concurrent options and default added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:20:10 +01:00
Mark Bolwell
9a113ea4a8
fix pre-commit var naming for authselect
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-09-30 14:17:08 +01:00
Frederick Witty
d927b3006d
linting clean up
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-11 16:05:24 -04:00
Frederick Witty
67c574d8a9
Updates from Public
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-09-10 12:57:50 -04:00
Fred W.
c630c23725
Merge pull request #40 from ansible-lockdown/august_updates
August updates
2025-08-14 16:37:22 -04:00
Mark Bolwell
eafee7e040
Added typo updates thanks to @DianaMariaDDM
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-08-14 17:19:53 +01:00
Mark Bolwell
55c7fa6dd5
added password of different LC public issue 372
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-08-14 17:12:56 +01:00
Mark Bolwell
95ed2ff03d
changed to import task public PR 377
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-08-14 17:09:58 +01:00
Mark Bolwell
4b302f97f9
fixed compability pre 2.14 thanks to public PR #380
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-08-14 16:50:41 +01:00
Mark Bolwell
625e4041c1
update logic for 5.2.4 public PR #371
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-08-14 16:20:51 +01:00
Mark Bolwell
73320db603
dont not run section 1.8 if not gdm PR #364 from public
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-08-14 16:17:45 +01:00
Mark Bolwell
62095f75fe
updated as per public PR #350
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-08-14 16:14:47 +01:00
Mark Bolwell
ef2c4d4ddb
Updated audit file permissions when running audit thansk to @steve-hayes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-08-04 10:15:48 +01:00
Mark Bolwell
3778d6fb62
improvement updated with public #361
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-07-04 11:34:53 +01:00
Mark Bolwell
0a56b16d32
updated as per public fix #360
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-07-04 11:32:56 +01:00
Mark Bolwell
1bdef212bd
Apply latest public fixes benchmark_v2.0.0
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-07-02 10:47:56 +01:00
davidalexander83
7ec2c9bf5e
Fix re.error due to (?i) not at start of re
6.2.2.3 and 6.2.2.4 cause issues due to current re syntax:
^(?i)(\s*compress=)

re.error: global flags not at the start of the expression at position 1

Fix removes ^ which resolves issue without affecting functionality.

Signed-off-by: davidalexander83 <davidalexander83@icloud.com>
2025-07-02 12:32:20 +10:00
Frederick Witty
0ee2de5e20
Addresses #318 - Thank you @kodebach & @bgro
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-27 12:04:29 -04:00
Frederick Witty
23338ccd31
Addresses #318 - Thank you @kodebach & @bgro
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-27 11:12:07 -04:00
Fred W.
0efd92e2a3
Merge pull request #31 from ansible-lockdown/JUNE2025QA
June 2025 QA: Replace egrep to grep
2025-06-23 08:36:55 -04:00
Mark Bolwell
82cc458d7a
Fix logic and notes for in crypto policy building
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-20 11:32:31 +01:00
Mark Bolwell
bd1547313a
Fix logic and notes for in crypto policy building
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-20 11:29:53 +01:00
uk-bolly
055cb35603
Merge branch 'devel' into audit_only_fetch
Signed-off-by: uk-bolly <mark.bollyuk@gmail.com>
2025-06-20 11:21:28 +02:00
Mark Bolwell
379b184554
added changed_when to fix false warning errors
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-19 16:32:20 +01:00
Mark Bolwell
d2de2783a8
added ability to fetch audit and update title
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-19 16:31:37 +01:00
uk-bolly
3dfa4f7e86
Merge pull request #348 from ansible-lockdown/root_user_check
root password and other improvements
2025-06-19 17:28:45 +02:00
Mark Bolwell
515d5c3bf7
added changed_when to resolve false warning message
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-19 16:26:48 +01:00
Mark Bolwell
908ac57db7
enabled fetch report and updated title
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-19 16:26:01 +01:00
Frederick Witty
acacb7a6bc
QA Fixes
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-16 17:18:08 -04:00
Frederick Witty
38a173546c
Update auditd with check_mode
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-16 16:49:36 -04:00
Frederick Witty
b38e7d06eb
var fixes for 1.1.2.3.x and 1.1.2.4.x
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
2025-06-16 15:14:08 -04:00