553 commits

Author	SHA1	Message	Date
George Nalen	2b7c8293b8	fixed linting issue ... Signed-off-by: George Nalen <georgen@mindpointgroup.com>	2025-12-22 16:56:24 -05:00
George Nalen	beb3bfdc94	added option for sysctl or kernel for disabling IPv6 ... Signed-off-by: George Nalen <georgen@mindpointgroup.com>	2025-12-22 16:35:08 -05:00
Mark Bolwell	571711f11e	updated with correct fix thanks to @bbaassssiiee ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-12-01 10:23:25 +00:00
Mark Bolwell	52452b1e3c	issues 413 addressed thansk to @bbaassssiiee ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-11-28 14:51:43 +00:00
Mark Bolwell	5354111505	improved audit logic ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-10-16 15:27:27 +01:00
Frederick Witty	724a09f23d	Merge pull request #401 from ansible-lockdown/Oct25_updates ... Oct25 updates	2025-10-03 10:17:39 -04:00
Mark Bolwell	6500e39f42	Added fix for #399 thanks to @trumbaut ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-10-03 08:19:07 +01:00
uk-bolly	c69fedcf0a	Merge pull request #398 from trumbaut/fix_rule_3.2.1_reffering_to_cramfs ... Update cis_3.2.x.yml (add dccp to blacklist instead of cramfs	2025-10-02 13:42:40 +01:00
Thomas Rumbaut	7aa911b354	Update cis_3.2.x.yml (add dccp to blacklist instead of cramfs ... Signed-off-by: Thomas Rumbaut <thomas@rumbaut.be>	2025-10-02 10:06:44 +02:00
polski-g	319c7a8fbb	ensure check mode runs all non-destructive tasks ... Signed-off-by: polski-g <polski_g@sent.at>	2025-10-01 09:44:03 -04:00
Mark Bolwell	81eadd4a6f	max-concurrent audit option added ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-10-01 12:59:44 +01:00
Mark Bolwell	d2b371432e	issue #393 addressed thanks to @fragglexarmy ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-10-01 10:32:52 +01:00
Mark Bolwell	d63f58972d	fixed typo ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-10-01 10:32:24 +01:00
uk-bolly	7314d7b092	Merge pull request #394 from dbeuker/devel ... Suggestion for the missing assert parameter	2025-10-01 10:25:22 +01:00
uk-bolly	23b60bc629	Merge pull request #390 from polski-g/modular_section_5_r2 ... Support section modularization (for Sec 5 only right now)	2025-10-01 10:24:44 +01:00
uk-bolly	3e848dd6f1	Merge pull request #386 from polski-g/regex_5_3_2_2 ... 5.3.2.2: fix regex failing to match whitespace	2025-10-01 10:24:13 +01:00
Danny Beuker	03d42ba8ce	Suggestion for the missing assert parameter ... Signed-off-by: Danny Beuker <dannybeuker@proton.me>	2025-09-22 10:02:50 +02:00
polski-g	2557470054	5.3.2.2: fix regex failing to match whitespace ... Fixed yamllint (colons) issues Signed-off-by: polski-g <polski_g@sent.at>	2025-09-15 13:04:29 -04:00
polski-g	392c3f9016	Support section 5 modularization ... corrected trailing whitespace Signed-off-by: polski-g <polski_g@sent.at>	2025-09-15 12:59:41 -04:00
Fred W.	374b9a5dc0	Merge pull request #391 from polski-g/check_mode_1_4_2 ... 1.4.2: grep command should run in check_mode	2025-09-10 08:51:33 -04:00
Fred W.	92bba62586	Merge pull request #385 from polski-g/check_mode_5_4_1_1 ... 5.4.1.1: shell command should run in check_mode	2025-09-10 08:50:49 -04:00
Frederick Witty	e61cafb59b	addressed issue #387, thank you @fragglexarmy ... Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>	2025-09-09 15:59:30 -04:00
Frederick Witty	5794114b3e	Update prelim logic to address #382 ... Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>	2025-09-09 15:12:01 -04:00
Frederick Witty	2dfa9266a8	Update cryto policy var to standard ... Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>	2025-09-08 11:54:57 -04:00
Frederick Witty	413ccb96b7	Update cryto policy based controls with improved logic ... Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>	2025-09-05 16:39:55 -04:00
Frederick Witty	b0ec6c4820	Fix for #384, thank you @polski-g ... Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>	2025-09-05 16:24:11 -04:00
polski-g	1c9c1b919c	1.4.2: grep command should run in check_mode ... Signed-off-by: polski-g <polski_g@sent.at>	2025-09-03 09:55:00 -04:00
Frederick Witty	de7555aa10	Update Changelog with fixes ... Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>	2025-09-02 17:14:30 -04:00
polski-g	88507f9516	5.4.1.1: shell command should run in check_mode ... Signed-off-by: polski-g <polski_g@sent.at>	2025-08-28 13:15:29 -04:00
Mark Bolwell	f0fb701122	updated var naming on 5.4.2.5 ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-08-15 16:10:37 +01:00
Mark Bolwell	7428f269e7	changed rsyslog to insert before line134 ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-08-15 16:09:51 +01:00
Mark Bolwell	cddad90a23	enabled different locale characters in password check ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-08-15 16:04:07 +01:00
Mark Bolwell	fd2bfb7437	improved prelim tests for 5.2.4 ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-08-15 16:03:11 +01:00
Mark Bolwell	b21569c62d	added update for gdm and giu packages ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-08-15 16:00:36 +01:00
Michael Hicks	cfbbb3339a	renames 3 uses of ansible.builtin.systemd_service to ansible.builtin.systemd to maintain ansible 2.12+ compat. Fixes #379 ... Signed-off-by: Michael Hicks <nooneofconsequence@gmail.com>	2025-08-11 15:17:00 -07:00
Mark Bolwell	4b62f0fc35	Updated post steps inline with pre steps for file permissions ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-08-04 09:56:30 +01:00
Mark Bolwell	876e261d1f	fixed issues for permissions when using fetch thanks to @steve-hayes ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-08-04 09:54:07 +01:00
uk-bolly	feb183553c	Merge pull request #367 from siemens/siemens/rhel9_v2_fixing_inconsistencies ... Fixing minor inconsistencies	2025-07-18 14:34:22 +01:00
Tomuta, Diana Maria (T CST SCC-RO)	b182abf2aa	Fixing inconsistencies for importing tasks from section 1. ... Signed-off-by: Diana-Maria Dumitru <diana.dumitru@siemens.com>	2025-07-08 16:38:12 +03:00
Tomuta, Diana Maria (T CST SCC-RO)	4329591c90	Fixing inconsistencies between rule ids in title, tags and when. ... Signed-off-by: Diana-Maria Dumitru <diana.dumitru@siemens.com>	2025-07-08 09:37:29 +03:00
uk-bolly	38916aeade	Merge pull request #361 from siemens/siemens/feat/rhel9_v2_fix_control_5.4.2.5 ... Fixing issue for Control 5.4.2.5	2025-07-04 11:35:17 +01:00
uk-bolly	1ed720e7c9	Merge pull request #360 from siemens/siemens/feat/rhel9_v2_fix_control_6.3.4.5 ... Fixing issue for Control 6.3.4.5	2025-07-04 11:33:11 +01:00
Tomuta, Diana Maria (T CST SCC-RO)	a556750894	Fixing issue https://code.siemens.com/infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis/-/issues/41. ... Signed-off-by: Diana-Maria Dumitru <diana.dumitru@siemens.com>	2025-07-03 13:03:08 +03:00
davidalexander83	7ec2c9bf5e	Fix re.error due to (?i) not at start of re ... 6.2.2.3 and 6.2.2.4 cause issues due to current re syntax: ^(?i)(\s*compress=) re.error: global flags not at the start of the expression at position 1 Fix removes ^ which resolves issue without affecting functionality. Signed-off-by: davidalexander83 <davidalexander83@icloud.com>	2025-07-02 12:32:20 +10:00
Frederick Witty	23338ccd31	Addresses #318 - Thank you @kodebach & @bgro ... Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>	2025-06-27 11:12:07 -04:00
Diana-Maria Dumitru	ed699a50ba	Fixing issue https://code.siemens.com/infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis/-/issues/43 . ... Signed-off-by: Diana-Maria Dumitru <diana.dumitru@siemens.com>	2025-06-26 13:35:51 +03:00
Mark Bolwell	bd1547313a	Fix logic and notes for in crypto policy building ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-06-20 11:29:53 +01:00
uk-bolly	055cb35603	Merge branch 'devel' into audit_only_fetch ... Signed-off-by: uk-bolly <mark.bollyuk@gmail.com>	2025-06-20 11:21:28 +02:00
uk-bolly	3dfa4f7e86	Merge pull request #348 from ansible-lockdown/root_user_check ... root password and other improvements	2025-06-19 17:28:45 +02:00
Mark Bolwell	515d5c3bf7	added changed_when to resolve false warning message ... Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>	2025-06-19 16:26:48 +01:00