ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2026-03-25 14:27:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Commit graph

  • 6088396b8a
         Merge c88d3dec49 into eedb2188c3 Michael Hicks 2026-03-24 09:11:06 +08:00
  • 6fa19455fd
         Merge 4288de9944 into eedb2188c3 pre-commit-ci[bot] 2026-03-23 17:39:32 +00:00
  • 4288de9944
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci-update-config pre-commit-ci[bot] 2026-03-23 17:39:30 +00:00
  • eedb2188c3
         Merge pull request #438 from ansible-lockdown/pre-commit-ci-update-config devel uk-bolly 2026-03-18 17:46:10 +00:00
  • 5e8ff2dc4a
         Merge pull request #439 from defnotyujine/fix_5.2.4 uk-bolly 2026-03-18 17:45:55 +00:00
  • 871c75d09e
         Merge pull request #437 from defnotyujine/fix-5.3.3.2.7 uk-bolly 2026-03-18 17:45:13 +00:00
  • ab6254aa7a
         Merge pull request #436 from defnotyujine/fix_5.1.10_5.1.11 uk-bolly 2026-03-18 17:43:04 +00:00
  • decb9061d5
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-03-16 17:45:10 +00:00
  • ce40cd630c
         Added missing variable for task 5.2.4 defnotyujine 2026-03-10 17:19:22 +08:00
  • e6ccdea365
         Updated Jinja template to fix compliance issues for control 5.3.3.2.7 defnotyujine 2026-03-09 19:14:33 +08:00
  • 83cf830f36
         Added always tag to ensure variable exists on CIS profile tag-based execution defnotyujine 2026-03-09 14:55:38 +08:00
  • c88d3dec49
         fixed extra line based yaml lint failing issue Michael Hicks 2026-03-04 11:30:12 -08:00
  • c4a97079b1
         added guardrails on enabled and state flags to systemd mask tasks to only disable and stop when the package is installed, otherwise just mask to prevent the service from ever starting should it get installed at a later time. This allows hardening to proceed when the service doesn't exist but masking has been requested. Otherwise the playbook run will fail at a step when the service which comes with the package doesn't already exist Michael Hicks 2026-03-04 10:40:41 -08:00
  • 497b3dc8d9
         Merge pull request #433 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2026-03-03 09:55:07 +00:00
  • e6ba3cea4a
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-03-02 17:47:33 +00:00
  • b98381fcd8
         Merge pull request #432 from ansible-lockdown/devel 2.2.0 main uk-bolly 2026-02-27 11:43:24 +00:00
  • 587dfb40cf
         Merge pull request #429 from ansible-lockdown/pub_feb26_updates Frederick Witty 2026-02-12 10:14:46 -05:00
  • 25b9934ce0
         removed dup key Mark Bolwell 2026-02-12 12:17:31 +00:00
  • 3015e2fe2f
         Merge branch 'devel' into pub_feb26_updates uk-bolly 2026-02-12 09:54:10 +00:00
  • 032c75924e
         Tidy up 5.3.2.1 Mark Bolwell 2026-02-12 09:49:52 +00:00
  • 98e89d8945
         Latest fixes updates Feb26 Mark Bolwell 2026-02-12 09:15:05 +00:00
  • 3cfcf00717
         Merge pull request #63 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-11 17:01:56 -05:00
  • f413385208
         Update .j2 branding Frederick Witty 2026-02-11 15:39:59 -05:00
  • 4aa09d558f
         Merge pull request #61 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-11 15:19:20 -05:00
  • 71206432be
         QA fixes and rollback of audit_only logic Frederick Witty 2026-02-11 14:54:30 -05:00
  • 15ebe5500b
         Merge pull request #428 from draygoX/devel uk-bolly 2026-02-11 09:32:37 +00:00
  • 11becb32c5
         QA Fixes Frederick Witty 2026-02-10 16:01:05 -05:00
  • a6aa5895d5
         Merge pull request #60 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-06 10:24:39 -05:00
  • 2863be6c02
         tidied up comments to make it simpler Mark Bolwell 2026-02-06 14:16:29 +00:00
  • 591f0d90f4
         Updated comments for password hash and variable Mark Bolwell 2026-02-06 12:49:05 +00:00
  • 0a77d6859f
         Merge pull request #59 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-05 16:01:24 -05:00
  • 3442801399
         tidy up of variables and warning for bootloader password Mark Bolwell 2026-02-05 20:28:52 +00:00
  • 9a3f458db0
         Updated bootloader password logic and enabled old methods without change Mark Bolwell 2026-02-05 18:10:29 +00:00
  • 9b091984db
         updated logic to allow manual hash to be added or filter Mark Bolwell 2026-02-05 17:53:55 +00:00
  • f1786fe20f
         added passlib dependency documentation Mark Bolwell 2026-02-05 10:39:04 +00:00
  • 83ee942ecf
         updated Mark Bolwell 2026-02-03 09:18:36 +00:00
  • 943b570484
         incorporated PR 345 thanks to @thulium-drake Mark Bolwell 2026-02-03 09:01:55 +00:00
  • c7567a98ac
         fixed tags and audit logic Mark Bolwell 2026-02-03 08:57:45 +00:00
  • eb9c96f335
         Updated Company title Mark Bolwell 2026-02-01 20:13:34 +00:00
  • 2708a28409
         removed schedule tasks Mark Bolwell 2026-02-01 20:09:48 +00:00
  • 3e27eb88de
         Updated Mark Bolwell 2026-02-01 20:09:10 +00:00
  • db0b08762e
         fixed typo thats to Eugene @Frequentis Mark Bolwell 2026-02-01 19:54:22 +00:00
  • 63d2ce7d2d
         removed legacy option Mark Bolwell 2026-02-01 19:53:50 +00:00
  • 8126665a02
         Move rhel9cis_ipv6_disable_method to a better location draygoX 2026-01-23 13:15:08 -06:00
  • 663f84d1fe
         Merge pull request #427 from ansible-lockdown/devel 2.1.0 uk-bolly 2026-01-26 12:00:22 +00:00
  • e6a29ab36d
         Merge pull request #426 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2026-01-22 08:48:58 +00:00
  • d3f24d9d94
         Merge pull request #420 from bol7742/patch-1 uk-bolly 2026-01-22 08:48:38 +00:00
  • c1f4b780be
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-01-19 17:44:50 +00:00
  • 6b986a7352
         Merge pull request #57 from ansible-lockdown/2026Jan_Updates Frederick Witty 2026-01-08 16:41:35 -05:00
  • e65df16f67
         Update 3.1.1 Frederick Witty 2026-01-08 14:33:16 -05:00
  • 173fbd3254
         Linting Frederick Witty 2026-01-08 14:26:24 -05:00
  • 10f88cc1a3
         update vars to rhel9 Frederick Witty 2026-01-08 14:13:07 -05:00
  • 309ff4cdd7
         Fixes from Public Issue 418 and 419 + Lic year Frederick Witty 2026-01-08 14:08:35 -05:00
  • b2d08552c5
         Merge pull request #425 from ansible-lockdown/2026Jan_Updates Frederick Witty 2026-01-08 13:50:20 -05:00
  • 02132181e6
         update changelog Frederick Witty 2026-01-08 12:24:44 -05:00
  • 22a9b085d7
         fix for #419, thank you @aaronk1 Frederick Witty 2026-01-08 12:23:40 -05:00
  • 87cd0f3eb5
         fix for #418 and update Lic year Frederick Witty 2026-01-08 09:40:08 -05:00
  • 2d02d8b048
         Merge pull request #56 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-12-30 14:42:39 -05:00
  • fb74617694
         Merge pull request #55 from ansible-lockdown/disable_ipv6_improvements Frederick Witty 2025-12-30 10:19:52 -05:00
  • 923cba3ca5
         Merge pull request #424 from ansible-lockdown/issue_416_fix Frederick Witty 2025-12-30 10:18:50 -05:00
  • 5d1143ff87
         Update changelog Frederick Witty 2025-12-30 08:21:47 -05:00
  • fefd2c94b2
         Update ansible_vars_goss with var rhel9cis_ipv6_disable_method Frederick Witty 2025-12-30 08:17:57 -05:00
  • ac83c8cf35
         Update audit vars to add rhel9cis_ipv6_disable_method: {{ rhel9cis_ipv6_disable_method }} Frederick Witty 2025-12-29 17:18:05 -05:00
  • 863d1af4cf
         Merge pull request #423 from ansible-lockdown/crypto_policies Frederick Witty 2025-12-29 09:24:02 -05:00
  • 76cd8c7cb3
         Tidy up wording regarding crypto policy modules thanks to @kpi-nourman #414 Mark Bolwell 2025-12-29 09:43:28 +00:00
  • 67b411400e
         Merge pull request #54 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-12-24 10:11:45 -05:00
  • fe41034da6
         Merge pull request #53 from ansible-lockdown/disable_ipv6_improvements Frederick Witty 2025-12-24 09:06:32 -05:00
  • 7ff8e7b6b9
         Updated disable IPv6 logic George Nalen 2025-12-23 11:20:21 -05:00
  • 8c2597e61b
         Merge pull request #422 from ansible-lockdown/issue_416_fix George Nalen 2025-12-23 11:10:13 -05:00
  • 29a48f7f4c
         updated name info for tasks related to 3.1.1 George Nalen 2025-12-23 09:04:42 -05:00
  • d9927f005b
         fixed typo in disable method var George Nalen 2025-12-23 08:42:28 -05:00
  • f5d7d2294d
         Merge pull request #421 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2025-12-23 09:27:35 +00:00
  • 2b7c8293b8
         fixed linting issue George Nalen 2025-12-22 16:56:24 -05:00
  • beb3bfdc94
         added option for sysctl or kernel for disabling IPv6 George Nalen 2025-12-22 16:35:08 -05:00
  • 96474159ab
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2025-12-22 17:33:38 +00:00
  • f15407dcb4
         fix: make 5.3.2.2 idempotent with 5.3.3.1.1 bol7742 2025-12-22 11:28:49 +01:00
  • 62989d258b
         added fix to issue #416 George Nalen 2025-12-19 16:31:37 -05:00
  • 53287f31a9
         Merge pull request #417 from ansible-lockdown/pre-commit-ci-update-config Frederick Witty 2025-12-17 14:43:02 -05:00
  • 322404a692
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2025-12-15 17:41:29 +00:00
  • de09b5d150
         Merge pull request #50 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-12-01 11:00:12 -05:00
  • 07885f99b4
         Merge pull request #415 from ansible-lockdown/issue_413 Frederick Witty 2025-12-01 08:53:54 -05:00
  • c04326b2fe
         Merge pull request #51 from ansible-lockdown/priv_413 Frederick Witty 2025-12-01 08:38:43 -05:00
  • f80c60bb8a
         updated with correct fix thanks to @bbaassssiiee Mark Bolwell 2025-12-01 10:41:38 +00:00
  • 571711f11e
         updated with correct fix thanks to @bbaassssiiee Mark Bolwell 2025-12-01 10:23:25 +00:00
  • 52452b1e3c
         issues 413 addressed thansk to @bbaassssiiee Mark Bolwell 2025-11-28 14:51:43 +00:00
  • add8ebb819
         udpated Mark Bolwell 2025-11-28 14:47:00 +00:00
  • ed784d270b
         added fix for issues #413 azure locked passwords Mark Bolwell 2025-11-28 14:44:59 +00:00
  • 32a3473ddc
         updated Mark Bolwell 2025-11-28 14:35:20 +00:00
  • 8b160681f5
         Merge pull request #412 from ansible-lockdown/issue_#410 Frederick Witty 2025-11-25 10:06:32 -05:00
  • 63931388ed
         Merge pull request #49 from ansible-lockdown/priv_410 Frederick Witty 2025-11-25 10:05:47 -05:00
  • dc570e8b53
         add fix provided by @kpi-nourman via discord community Mark Bolwell 2025-11-25 09:29:56 +00:00
  • 72602c63fa
         add fix provided by @kpi-nourman via discord community Mark Bolwell 2025-11-25 09:28:00 +00:00
  • 5091aafcd6
         Merge pull request #411 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2025-11-25 08:46:23 +00:00
  • 539ac4f5cc
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2025-11-24 17:42:03 +00:00
  • eb432ddb14
         Merge pull request #409 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2025-11-17 12:07:40 +00:00
  • 0ec943073c
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2025-11-10 17:45:49 +00:00
  • a07d03baaf
         Merge pull request #48 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-11-04 17:23:03 -05:00
  • d2dc32d3ba
         updated layout Mark Bolwell 2025-11-04 16:43:37 +00:00
  • 1a3e56c11d
         updated layout Mark Bolwell 2025-11-04 16:37:40 +00:00
  • 28b52876ec
         Merge pull request #408 from ansible-lockdown/auto_issue_to_project Frederick Witty 2025-10-23 15:07:02 -04:00