ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-27 15:33:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
726 commits 5 branches 14 tags 2.6 MiB
Commit graph

81 commits

Author SHA1 Message Date
root@DERVISHx
a3ddf8ff20
Fixing conflicts after rebasing current feature branch onto 'devel' 2024-01-30 23:04:37 +02:00
Marcin Dulinski
0dab713974
Solved minor conflicts in defaults/main.yml file, when re-basing 
Signed-off-by: Marcin Dulinski <martin@dulin.me.uk>
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 23:01:33 +02:00
Ionut Pruteanu
efdff71e84
Removing not useful line from docs 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 23:01:33 +02:00
Ionut Pruteanu
f90a67987d
Revert "Added vars for streams." 
[IP] I see no benefit to duplicate vars in defaults/main.yml in other files like specific vars for Alma/Rocky, especially since
we're using the same values for those vars. Also, replacing rsyslog with journald is not fine for this current doc-extension proposal.

This reverts commit a57333dcf1.

Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 23:01:32 +02:00
Ionut Pruteanu
674e0fdf31
Improving doc for journald log parameters. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 23:01:32 +02:00
Ionut Pruteanu
945e020e6a
Documenting usage of chrony variables. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 23:01:23 +02:00
Ionut Pruteanu
6744d901bc
Merge branch 'siemens/feat/document_main_variables' of code.siemens.com:infosec-pss-gov/security-crafter-baseline-automations/ansible-lockdown/rhel9-cis into siemens/feat/document_main_variables 2024-01-30 22:48:57 +02:00
Ionut Pruteanu
159a06dab3
Finalising the docs content & syntax 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 22:48:46 +02:00
root@DERVISHx
d1434f6b5b
Rebasing 
Signed-off-by: root@DERVISHx <nuno.carvalho@siemens.com>
 2024-01-30 22:41:04 +02:00
root@DERVISHx
5815c43654
Added vars for streams. 
Signed-off-by: root@DERVISHx <nuno.carvalho@siemens.com>
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 22:33:02 +02:00
Ionut Pruteanu
e40d8cb58c
Fixing conflicts 
Last docs part - additions

Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 22:32:47 +02:00
Ionut Pruteanu
85ed8ce781
Doc additions for: 
- Sections 2.2 && 2.3
- Section 3
- Section 4.1

Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 22:28:20 +02:00
Ionut Pruteanu
490a47eb0f
Doc additions for: 
- Yum repos,
- bootloader,
- crypto policies,
- SELinux
- NTP

Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 22:28:20 +02:00
Ionut Pruteanu
65aed536fa
Fixing conflicts after rebase --continue 
Small additions to first part of documentation.

Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2024-01-30 22:27:43 +02:00
root@DERVISHx
b262d0a3e8
Solving conflicts after latest rebase 
~~~~~
Document variables in defaults/main.yml, Fix 5 from devel

Signed-off-by: root@DERVISHx <nuno.carvalho@siemens.com>
 2024-01-30 22:22:46 +02:00
uk-bolly
df1aef8d31
Merge pull request #148 from siemens/siemens/feat/AuditVarsRefactoring 
Siemens/feat/audit vars refactoring
 2024-01-26 12:34:30 +00:00
Ionut Pruteanu
ca41b128cd
Defining some threshold for (audit_)space_left vars, as well as a bool which governs if extra params will be configured 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2023-12-20 22:21:14 +02:00
Ionut Pruteanu
88ffe32137
Storing max_log_file under rhel9cis_auditd dict variable. 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2023-12-20 21:58:49 +02:00
Marcin Dulinski
8b875ad228
Fixed chrony configuration options 
Signed-off-by: Marcin Dulinski <martin@dulin.me.uk>
 2023-11-22 09:17:15 +00:00
Mark Bolwell
8784941179
audit variables seperated 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-11-21 09:48:49 +00:00
Mark Bolwell
11071a66ab
added pragma allowed 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-21 15:36:05 +01:00
Mark Bolwell
f6fd7e02d3
git audit binary version updated 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-18 14:02:44 +01:00
Mark Bolwell
43a339c74f
new var rhel9cis_rhel_default_repo 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-07 14:23:12 +01:00
Mark Bolwell
18e59d32f1
more ansible_facst referenced #54 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-06 09:55:27 +01:00
Mark Bolwell
60e2ec5795
Added comment for os_check var 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-08-10 13:55:18 +01:00
Mark Bolwell
009c9fc498
updated audit vars naming, AMD & ARM binaries 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-07-28 15:16:50 +01:00
Mark Bolwell
e19402d613
updated comment 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-07-05 13:01:56 +01:00
Mark Bolwell
12c5d6e813
update comment 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-06-28 11:46:08 +01:00
Mark Bolwell
674d3417ff
rule_1.10 updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-06-06 14:36:38 +01:00
Jimmy Conner
626c76236a
Fix Policy Number for Grub Boot Password 
Signed-off-by: Jimmy Conner <jconner@redhat.com>
 2023-05-31 10:56:33 -05:00
Mark Bolwell
42b9dc9e89
Linting 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-20 15:16:15 +00:00
Mark Bolwell
868e74bbf4
issue 41 5.3.7 tasks 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-13 09:44:51 +00:00
Mark Bolwell
58d3bb4e41
updated var naming 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-01 09:17:38 +00:00
Mark Bolwell
a28c0531ee
align audit release 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-20 14:02:49 +00:00
Mark Bolwell
a14e9c5dbe
#30 thanks to @smatterchew sshd config file dropin ability 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-20 11:31:46 +00:00
Mark Bolwell
e5ce163fcf
new option to 6_2_16 not follow symlinks 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-14 08:54:21 +00:00
Mark Bolwell
bf83a6b84c
Add more safety around control 5.4.2 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 12:19:16 +00:00
Mark Bolwell
7d426bd497
Added # comment 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 16:03:17 +00:00
Mark Bolwell
032e73348a
removed vars not used any longer 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-23 17:01:27 +00:00
Mark Bolwell
fdf298328c
documented 1.2.4 for rhel 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-20 17:14:24 +00:00
Mark Bolwell
5eb72bc544
updated banner message 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-20 11:21:31 +00:00
Mark Bolwell
de88c96f24
section 1.8 alignment v1.0.0 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-20 10:29:50 +00:00
Mark Bolwell
499b67ceb2
Updated rsyslog server variable 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-19 14:51:30 +00:00
Mark Bolwell
999d7b5b1e
fix csv sugroup option updated 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-19 13:33:11 +00:00
Mark Bolwell
9e9e3abc43
changed default grub password 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-18 16:29:03 +00:00
Mark Bolwell
bc90630ca8
git add set bootloader & gossupdates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-18 16:21:51 +00:00
Mark Bolwell
e17acee56d
fixed variables 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-13 13:59:15 +00:00
Mark Bolwell
0c279ad97d
new control 5.6.6 added 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-13 09:09:49 +00:00
Mark Bolwell
e62e5630b4
section 4 updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-12 11:38:53 +00:00
Mark Bolwell
1d96539637
Exentsion to auditd 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2022-10-14 12:29:06 +01:00