root@DERVISHx
|
a6213412cb
|
Merge branch 'siemens/rhel9/devel' of code.siemens.com:infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/rhel9/devel
|
2024-01-30 22:16:00 +02:00 |
|
Ionut Pruteanu
|
7641fd3684
|
As Nuno discovered, I was accidentally adding a new line(un-needed)
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:16:00 +02:00 |
|
Ionut Pruteanu
|
af7e032d34
|
Using again sfera_automation_pipeline's master branch
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:16:00 +02:00 |
|
Ionut Pruteanu
|
3b91e9ca5f
|
Adding newest test results for L2.
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:16:00 +02:00 |
|
Ionut Pruteanu
|
8815f14e02
|
new branch in Sfera_automation_pipeline, OIDC-testing
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:16:00 +02:00 |
|
Ionut Pruteanu
|
ad107e79c5
|
As Nuno discovered, I was accidentally adding a new line(un-needed)
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:15:59 +02:00 |
|
Ionut Pruteanu
|
4dff7f01b3
|
Naming the Ansible vars in tesfile properly, with respect to rhel9 tasks.
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:15:59 +02:00 |
|
Ionut Pruteanu
|
8bcb3c2be7
|
Using again sfera_automation_pipeline's master branch
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:15:59 +02:00 |
|
Ionut Pruteanu
|
5884ef426e
|
Adding testfile with L1.
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:15:59 +02:00 |
|
Ionut Pruteanu
|
80fd642f10
|
Adding newest test results for L2.
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:15:59 +02:00 |
|
Ionut Pruteanu
|
0e671e84b3
|
Adding CI file
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:15:59 +02:00 |
|
Ionut Pruteanu
|
4cbc2e371a
|
new branch in Sfera_automation_pipeline, OIDC-testing
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2024-01-30 22:15:59 +02:00 |
|
uk-bolly
|
3fe681c0d2
|
Merge pull request #159 from ansible-lockdown/pre-commit-ci-update-config
[pre-commit.ci] pre-commit autoupdate
|
2024-01-26 12:50:54 +00:00 |
|
uk-bolly
|
b726c2e444
|
Merge pull request #154 from jLemmings/patch-3
Remove trailing comma to align with other roles
|
2024-01-26 12:44:07 +00:00 |
|
uk-bolly
|
902956e51d
|
Merge pull request #151 from sickbock/devel
Corrections to tags and a variable
|
2024-01-26 12:37:20 +00:00 |
|
uk-bolly
|
df1aef8d31
|
Merge pull request #148 from siemens/siemens/feat/AuditVarsRefactoring
Siemens/feat/audit vars refactoring
|
2024-01-26 12:34:30 +00:00 |
|
uk-bolly
|
ac5eee81df
|
Merge pull request #112 from siemens/siemens/feat/ensure_default_umask_027_5_6_5
Adding new entry in /etc/pam.d/system-auth
|
2024-01-26 12:32:45 +00:00 |
|
pre-commit-ci[bot]
|
aa8a60b4ee
|
[pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/ansible-community/ansible-lint: v6.22.1 → v6.22.2](https://github.com/ansible-community/ansible-lint/compare/v6.22.1...v6.22.2)
|
2024-01-22 17:33:49 +00:00 |
|
uk-bolly
|
068c45f509
|
Merge pull request #105 from siemens/siemens/feat/reverse_path_filtering_3_3_7
Adding missing lines to usr: sysctl.d/50-default.conf
|
2024-01-18 13:15:28 +00:00 |
|
Joshua Hemmings
|
87d2685f4e
|
Update cis_1.1.7.x.yml
Signed-off-by: Joshua Hemmings <josh@hemmings.ch>
|
2024-01-10 16:11:27 +01:00 |
|
uk-bolly
|
200b2c244b
|
Merge pull request #152 from jLemmings/patch-1
Remove trailing comma to align with other roles
|
2024-01-09 16:48:20 +00:00 |
|
Joshua Hemmings
|
d73f26a7ab
|
Remove trailing comma to align with other roles
Signed-off-by: Joshua Hemmings <josh@hemmings.ch>
|
2024-01-09 09:17:00 +01:00 |
|
Joachim la Poutré
|
e0491ccb8f
|
Update cis_6.2.x.yml
Corrected tag: rule_6.2.3
Signed-off-by: Joachim la Poutré <14360383+sickbock@users.noreply.github.com>
|
2024-01-03 11:20:08 +01:00 |
|
Joachim la Poutré
|
d6b44aac70
|
Update cis_6.1.x.yml
Corrected tags: rule_6.1.8 & rule_6.1.12
Signed-off-by: Joachim la Poutré <14360383+sickbock@users.noreply.github.com>
|
2024-01-03 11:18:52 +01:00 |
|
Joachim la Poutré
|
3b256ff831
|
Update cis_5.6.1.x.yml
Corrected tag: rule_5.6.1.5
Signed-off-by: Joachim la Poutré <14360383+sickbock@users.noreply.github.com>
|
2024-01-03 11:16:20 +01:00 |
|
Joachim la Poutré
|
712b8b6ecd
|
Update cis_5.6.1.x.yml
Corrected tag: rule_5.6.1.1
Signed-off-by: Joachim la Poutré <14360383+sickbock@users.noreply.github.com>
|
2024-01-03 11:15:11 +01:00 |
|
Joachim la Poutré
|
4d749d988d
|
Update cis_1.8.x.yml
Corrected tag rule_1.8.10
Signed-off-by: Joachim la Poutré <14360383+sickbock@users.noreply.github.com>
|
2024-01-03 11:13:32 +01:00 |
|
Joachim la Poutré
|
1e55d86001
|
Update cis_1.3.x.yml
Correction to "when": 1_3_3
Signed-off-by: Joachim la Poutré <14360383+sickbock@users.noreply.github.com>
|
2024-01-03 11:12:06 +01:00 |
|
uk-bolly
|
6f8a95c73a
|
Merge pull request #143 from siemens/siemens/feat/4.2.1.3conditionalAndSectionHeader
Siemens/feat/4.2.1.3conditional and section header
|
2023-12-21 08:40:41 +00:00 |
|
uk-bolly
|
e545b89c7b
|
Merge pull request #145 from siemens/siemens/feat/5.4.2_addVarUsage
Using rhel9cis_authselect['options'], otherwise not used at all
|
2023-12-21 08:39:48 +00:00 |
|
Ionut Pruteanu
|
ca41b128cd
|
Defining some threshold for (audit_)space_left vars, as well as a bool which governs if extra params will be configured
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-20 22:21:14 +02:00 |
|
Ionut Pruteanu
|
88ffe32137
|
Storing max_log_file under rhel9cis_auditd dict variable.
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-20 21:58:49 +02:00 |
|
uk-bolly
|
145ac85e52
|
Merge pull request #103 from Corey0219/update-4-2-3
find hidden files in /var/log for 4.3.2
|
2023-12-20 09:48:47 +00:00 |
|
Corey Reid
|
8d85f178e2
|
find hidden files in /var/log for 4.3.2
Signed-off-by: Corey Reid <corey.nathan.reid@gmail.com>
|
2023-12-17 17:36:34 +00:00 |
|
uk-bolly
|
c56ea1ac9a
|
Merge pull request #140 from siemens/siemens/feat/3.4.2.5_fixConditional
3.4.2.5 conditional fix
|
2023-12-13 08:44:08 +00:00 |
|
uk-bolly
|
82d1c2bdfb
|
Merge pull request #138 from siemens/siemens/feat/2.3.4_fixConditional
Using correct conditional for ftpd
|
2023-12-13 08:43:07 +00:00 |
|
uk-bolly
|
779c90ea0e
|
Merge pull request #136 from siemens/siemens/feat/2.2.16_fixingNFSLogicBetweenMaskingServiceVsRemovingPackage
Masking service when server package is needed
|
2023-12-13 08:42:33 +00:00 |
|
uk-bolly
|
74f21e5303
|
Merge pull request #133 from siemens/siemens/feat/timeoutValueDefinedNotUsed
Timeout value defined in defaults/main.yml file not used
|
2023-12-13 08:40:02 +00:00 |
|
uk-bolly
|
ecbd514df1
|
Merge pull request #129 from siemens/siemens/feat/removingRedundantConditionals
Removing redundant conditional statements
|
2023-12-13 08:27:49 +00:00 |
|
uk-bolly
|
998eaf30ba
|
Merge pull request #121 from dulin/fix-chrony
Fixed chrony configuration options
|
2023-12-13 08:23:13 +00:00 |
|
uk-bolly
|
d022977723
|
Merge pull request #127 from ansible-lockdown/pre-commit-ci-update-config
[pre-commit.ci] pre-commit autoupdate
|
2023-12-13 08:20:34 +00:00 |
|
uk-bolly
|
b7936bc633
|
Merge pull request #122 from senihucar/patch-1
Update cis_5.6.1.x.yml
|
2023-12-13 08:19:58 +00:00 |
|
Ionut Pruteanu
|
c19e350b7d
|
Using rhel9cis_authselect['options'], otherwise not used at all
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-08 16:44:30 +02:00 |
|
Ionut Pruteanu
|
e0de491263
|
whole section defined in cis_4.2.1.x.yml gets executed only when: rhel9cis_syslog == 'rsyslog', having same condition is redundant and may confuse users.
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-08 12:03:00 +02:00 |
|
Ionut Pruteanu
|
d79bba53c6
|
Rsyslog subsection corrected header(was using 4.2 logging name, instead of 4.2.1. rsyslog name)
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-08 12:01:10 +02:00 |
|
Ionut Pruteanu
|
81fd98e2c6
|
Using correct conditional for Task relying on 'firewall-cmd --get-active-zones' cmd
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-07 20:38:20 +02:00 |
|
Ionut Pruteanu
|
cd04537bf1
|
Using correct conditional for ftpd
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-07 18:58:02 +02:00 |
|
Ionut Pruteanu
|
9d988b483f
|
Masking service when server package is needed
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-07 18:10:09 +02:00 |
|
Ionut Pruteanu
|
4fe5f95cf7
|
Timeout value defined in defaults/main.yml file not used
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-05 20:40:50 +02:00 |
|
Ionut Pruteanu
|
72b503bf46
|
Removing redundant conditional statements
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
|
2023-12-05 14:42:51 +02:00 |
|