uk-bolly
|
27dc592c12
|
Merge pull request #343 from polski-g/auditd_check_mode
auditd: ensure check mode runs non-destructive call to ausyscall --dump
|
2025-06-16 11:15:30 +02:00 |
|
Mark Bolwell
|
7bef2eda62
|
added check_mode false
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-06-16 10:12:27 +01:00 |
|
Mark Bolwell
|
18fc4ea585
|
updated conditional var name and regex best practices
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-06-16 10:08:56 +01:00 |
|
Mark Bolwell
|
b2308ac310
|
fixed typos in logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-06-16 10:07:55 +01:00 |
|
Mark Bolwell
|
51b20d383d
|
Renamed variable to prelim
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-06-16 10:07:27 +01:00 |
|
Mark Bolwell
|
9f50effd30
|
updated logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-06-16 10:01:10 +01:00 |
|
Frederick Witty
|
3a0ee6e9f8
|
update 1.3.1.6 log to grep -E
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
|
2025-06-12 15:44:03 -04:00 |
|
Frederick Witty
|
f40d17df92
|
Update eprep based tasks to grep/awk
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
|
2025-06-12 12:42:44 -04:00 |
|
Mark Bolwell
|
30bb04b1d4
|
updates root password check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-06-12 12:10:44 +01:00 |
|
Fred W.
|
f86803b1a7
|
Merge pull request #346 from ansible-lockdown/May2025Fixes
Fix for #325 thank you @mindrb
|
2025-06-09 12:23:28 -04:00 |
|
polski-g
|
5226f14b3e
|
fetch of auditd logfile should run in check_mode
Signed-off-by: polski-g <polski_g@sent.at>
|
2025-06-06 10:03:47 -04:00 |
|
polski-g
|
1bff329a05
|
auditd: ensure check mode runs non-destructive call to ausyscall --dump
Signed-off-by: polski-g <polski_g@sent.at>
|
2025-06-03 11:35:05 -04:00 |
|
uk-bolly
|
f70821bf7e
|
Merge pull request #340 from ansible-lockdown/interactive_user_update
Updated variable naming for interactive_users
|
2025-05-28 18:42:20 +01:00 |
|
Mark Bolwell
|
2e3499ca8c
|
added missing square brace
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 16:47:01 +01:00 |
|
Mark Bolwell
|
3197252611
|
Merge branch 'benchmark_v2.0.0' into interactive_user_update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 16:14:18 +01:00 |
|
Mark Bolwell
|
2256456f0e
|
align with public fixes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 16:12:31 +01:00 |
|
Mark Bolwell
|
f2c03f1e68
|
variable networkmanager package and typo fixes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 16:11:36 +01:00 |
|
Mark Bolwell
|
cb475d3368
|
fixed typo on post audit file name
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 16:10:28 +01:00 |
|
Mark Bolwell
|
7673c2ff00
|
Added home directory discovery
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 15:53:41 +01:00 |
|
Mark Bolwell
|
97abfaf9f8
|
updated passwd variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 15:41:12 +01:00 |
|
Mark Bolwell
|
f740d89b54
|
Added user home discovery
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 15:36:39 +01:00 |
|
Mark Bolwell
|
210535bf4f
|
updated loop var name
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 15:36:04 +01:00 |
|
Mark Bolwell
|
c4070c341b
|
Updated logic on 7.2.9 tasks
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 15:35:34 +01:00 |
|
Mark Bolwell
|
5dc2541731
|
Updated passwd variable name
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 14:57:29 +01:00 |
|
Mark Bolwell
|
f29fc9088c
|
fixed var naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 10:53:32 +01:00 |
|
Mark Bolwell
|
d136bfa381
|
Updated variable naming for interactive_users
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-28 10:22:30 +01:00 |
|
uk-bolly
|
96d054b0d2
|
Merge pull request #338 from polski-g/groupgroup_typo
Fix typo in variable name discovered_group_check
|
2025-05-28 10:02:28 +01:00 |
|
uk-bolly
|
4b4033e072
|
Merge pull request #337 from polski-g/network_manager_package_name
Variablize network-manager package name
|
2025-05-28 10:01:44 +01:00 |
|
polski_g
|
fb9577f7d9
|
Fix typo in variable name discovered_group_check
Signed-off-by: polski-g <polski_g@sent.at>
|
2025-05-23 12:34:44 -04:00 |
|
polski_g
|
4e49532e20
|
Variablize network-manager package name
Signed-off-by: polski-g <polski_g@sent.at>
|
2025-05-23 12:33:55 -04:00 |
|
polski_g
|
f564135e72
|
Check for existence of sshd_config.d/50-redhat.conf before trying to modify it
Signed-off-by: polski-g <polski_g@sent.at>
|
2025-05-23 12:32:02 -04:00 |
|
uk-bolly
|
73c84de639
|
Merge pull request #28 from ansible-lockdown/may25_issues
May25 issues
|
2025-05-23 16:33:53 +01:00 |
|
Frederick Witty
|
a16b6b96bc
|
Fix for #325 thank you @mindrb
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
|
2025-05-23 11:14:58 -04:00 |
|
Mark Bolwell
|
f83e5a69a2
|
interactive users ilogic improvements thanks to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 16:05:01 +01:00 |
|
Frederick Witty
|
0e61e796c6
|
Fix for #325 thank you @mindrb
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
|
2025-05-23 11:00:13 -04:00 |
|
Mark Bolwell
|
cc48a0d0b5
|
Interactive user discovery improve thanks to @polski-g
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 15:53:03 +01:00 |
|
Mark Bolwell
|
4357f132a9
|
improved test for passwd entries
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 15:50:41 +01:00 |
|
Mark Bolwell
|
daf5a3f462
|
changed command to shell for grep
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 15:01:16 +01:00 |
|
Mark Bolwell
|
c23bce5c75
|
added check mode logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 14:35:50 +01:00 |
|
Mark Bolwell
|
15bf03c754
|
added check mode logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 14:34:30 +01:00 |
|
Mark Bolwell
|
b9a59b9adc
|
added check_mode logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 14:30:30 +01:00 |
|
Mark Bolwell
|
2b37d0d732
|
added check_mode logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 14:30:17 +01:00 |
|
Mark Bolwell
|
8d5a32bc39
|
added rhel9cis_rsyslog_ansiblemanage conditional
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 14:25:42 +01:00 |
|
Mark Bolwell
|
de45131085
|
added rhel9cis_rsyslog_ansiblemanage conditional
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 14:25:22 +01:00 |
|
Mark Bolwell
|
e9babc8e3b
|
added ignore comments in file
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 14:22:49 +01:00 |
|
Mark Bolwell
|
4948d3cb09
|
added ignore comments in file
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
|
2025-05-23 14:22:30 +01:00 |
|
Frederick Witty
|
23b2909073
|
QA Fixes
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
|
2025-05-15 16:48:44 -04:00 |
|
Fred W.
|
1d266e61a7
|
Merge pull request #25 from ansible-lockdown/benchmark_v2.0.0
Benchmark v2.0.0
|
2025-05-09 15:12:17 -04:00 |
|
Fred W.
|
2c35f64f38
|
Merge pull request #24 from ansible-lockdown/devel
May 2025 devel to latest alignment
|
2025-05-09 14:51:13 -04:00 |
|
Frederick Witty
|
42024903e3
|
revamp set facts premlim_ max_int_uid and prelim_min_int_uid
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
|
2025-04-23 12:47:22 -04:00 |
|