Commit graph

  • 6088396b8a
    Merge c88d3dec49 into eedb2188c3 Michael Hicks 2026-03-24 09:11:06 +08:00
  • 6fa19455fd
    Merge 4288de9944 into eedb2188c3 pre-commit-ci[bot] 2026-03-23 17:39:32 +00:00
  • 4288de9944
    [pre-commit.ci] pre-commit autoupdate pre-commit-ci-update-config pre-commit-ci[bot] 2026-03-23 17:39:30 +00:00
  • eedb2188c3
    Merge pull request #438 from ansible-lockdown/pre-commit-ci-update-config devel uk-bolly 2026-03-18 17:46:10 +00:00
  • 5e8ff2dc4a
    Merge pull request #439 from defnotyujine/fix_5.2.4 uk-bolly 2026-03-18 17:45:55 +00:00
  • 871c75d09e
    Merge pull request #437 from defnotyujine/fix-5.3.3.2.7 uk-bolly 2026-03-18 17:45:13 +00:00
  • ab6254aa7a
    Merge pull request #436 from defnotyujine/fix_5.1.10_5.1.11 uk-bolly 2026-03-18 17:43:04 +00:00
  • decb9061d5
    [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-03-16 17:45:10 +00:00
  • ce40cd630c
    Added missing variable for task 5.2.4 defnotyujine 2026-03-10 17:19:22 +08:00
  • e6ccdea365
    Updated Jinja template to fix compliance issues for control 5.3.3.2.7 defnotyujine 2026-03-09 19:14:33 +08:00
  • 83cf830f36
    Added always tag to ensure variable exists on CIS profile tag-based execution defnotyujine 2026-03-09 14:55:38 +08:00
  • c88d3dec49
    fixed extra line based yaml lint failing issue Michael Hicks 2026-03-04 11:30:12 -08:00
  • c4a97079b1
    added guardrails on enabled and state flags to systemd mask tasks to only disable and stop when the package is installed, otherwise just mask to prevent the service from ever starting should it get installed at a later time. This allows hardening to proceed when the service doesn't exist but masking has been requested. Otherwise the playbook run will fail at a step when the service which comes with the package doesn't already exist Michael Hicks 2026-03-04 10:40:41 -08:00
  • 497b3dc8d9
    Merge pull request #433 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2026-03-03 09:55:07 +00:00
  • e6ba3cea4a
    [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-03-02 17:47:33 +00:00
  • b98381fcd8
    Merge pull request #432 from ansible-lockdown/devel 2.2.0 main uk-bolly 2026-02-27 11:43:24 +00:00
  • 587dfb40cf
    Merge pull request #429 from ansible-lockdown/pub_feb26_updates Frederick Witty 2026-02-12 10:14:46 -05:00
  • 25b9934ce0
    removed dup key Mark Bolwell 2026-02-12 12:17:31 +00:00
  • 3015e2fe2f
    Merge branch 'devel' into pub_feb26_updates uk-bolly 2026-02-12 09:54:10 +00:00
  • 032c75924e
    Tidy up 5.3.2.1 Mark Bolwell 2026-02-12 09:49:52 +00:00
  • 98e89d8945
    Latest fixes updates Feb26 Mark Bolwell 2026-02-12 09:15:05 +00:00
  • 3cfcf00717
    Merge pull request #63 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-11 17:01:56 -05:00
  • f413385208
    Update .j2 branding Frederick Witty 2026-02-11 15:39:59 -05:00
  • 4aa09d558f
    Merge pull request #61 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-11 15:19:20 -05:00
  • 71206432be
    QA fixes and rollback of audit_only logic Frederick Witty 2026-02-11 14:54:30 -05:00
  • 15ebe5500b
    Merge pull request #428 from draygoX/devel uk-bolly 2026-02-11 09:32:37 +00:00
  • 11becb32c5
    QA Fixes Frederick Witty 2026-02-10 16:01:05 -05:00
  • a6aa5895d5
    Merge pull request #60 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-06 10:24:39 -05:00
  • 2863be6c02
    tidied up comments to make it simpler Mark Bolwell 2026-02-06 14:16:29 +00:00
  • 591f0d90f4
    Updated comments for password hash and variable Mark Bolwell 2026-02-06 12:49:05 +00:00
  • 0a77d6859f
    Merge pull request #59 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-05 16:01:24 -05:00
  • 3442801399
    tidy up of variables and warning for bootloader password Mark Bolwell 2026-02-05 20:28:52 +00:00
  • 9a3f458db0
    Updated bootloader password logic and enabled old methods without change Mark Bolwell 2026-02-05 18:10:29 +00:00
  • 9b091984db
    updated logic to allow manual hash to be added or filter Mark Bolwell 2026-02-05 17:53:55 +00:00
  • f1786fe20f
    added passlib dependency documentation Mark Bolwell 2026-02-05 10:39:04 +00:00
  • 83ee942ecf
    updated Mark Bolwell 2026-02-03 09:18:36 +00:00
  • 943b570484
    incorporated PR 345 thanks to @thulium-drake Mark Bolwell 2026-02-03 09:01:55 +00:00
  • c7567a98ac
    fixed tags and audit logic Mark Bolwell 2026-02-03 08:57:45 +00:00
  • eb9c96f335
    Updated Company title Mark Bolwell 2026-02-01 20:13:34 +00:00
  • 2708a28409
    removed schedule tasks Mark Bolwell 2026-02-01 20:09:48 +00:00
  • 3e27eb88de
    Updated Mark Bolwell 2026-02-01 20:09:10 +00:00
  • db0b08762e
    fixed typo thats to Eugene @Frequentis Mark Bolwell 2026-02-01 19:54:22 +00:00
  • 63d2ce7d2d
    removed legacy option Mark Bolwell 2026-02-01 19:53:50 +00:00
  • 8126665a02
    Move rhel9cis_ipv6_disable_method to a better location draygoX 2026-01-23 13:15:08 -06:00
  • 663f84d1fe
    Merge pull request #427 from ansible-lockdown/devel 2.1.0 uk-bolly 2026-01-26 12:00:22 +00:00
  • e6a29ab36d
    Merge pull request #426 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2026-01-22 08:48:58 +00:00
  • d3f24d9d94
    Merge pull request #420 from bol7742/patch-1 uk-bolly 2026-01-22 08:48:38 +00:00
  • c1f4b780be
    [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-01-19 17:44:50 +00:00
  • 6b986a7352
    Merge pull request #57 from ansible-lockdown/2026Jan_Updates Frederick Witty 2026-01-08 16:41:35 -05:00
  • e65df16f67
    Update 3.1.1 Frederick Witty 2026-01-08 14:33:16 -05:00
  • 173fbd3254
    Linting Frederick Witty 2026-01-08 14:26:24 -05:00
  • 10f88cc1a3
    update vars to rhel9 Frederick Witty 2026-01-08 14:13:07 -05:00
  • 309ff4cdd7
    Fixes from Public Issue 418 and 419 + Lic year Frederick Witty 2026-01-08 14:08:35 -05:00
  • b2d08552c5
    Merge pull request #425 from ansible-lockdown/2026Jan_Updates Frederick Witty 2026-01-08 13:50:20 -05:00
  • 02132181e6
    update changelog Frederick Witty 2026-01-08 12:24:44 -05:00
  • 22a9b085d7
    fix for #419, thank you @aaronk1 Frederick Witty 2026-01-08 12:23:40 -05:00
  • 87cd0f3eb5
    fix for #418 and update Lic year Frederick Witty 2026-01-08 09:40:08 -05:00
  • 2d02d8b048
    Merge pull request #56 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-12-30 14:42:39 -05:00
  • fb74617694
    Merge pull request #55 from ansible-lockdown/disable_ipv6_improvements Frederick Witty 2025-12-30 10:19:52 -05:00
  • 923cba3ca5
    Merge pull request #424 from ansible-lockdown/issue_416_fix Frederick Witty 2025-12-30 10:18:50 -05:00
  • 5d1143ff87
    Update changelog Frederick Witty 2025-12-30 08:21:47 -05:00
  • fefd2c94b2
    Update ansible_vars_goss with var rhel9cis_ipv6_disable_method Frederick Witty 2025-12-30 08:17:57 -05:00
  • ac83c8cf35
    Update audit vars to add rhel9cis_ipv6_disable_method: {{ rhel9cis_ipv6_disable_method }} Frederick Witty 2025-12-29 17:18:05 -05:00
  • 863d1af4cf
    Merge pull request #423 from ansible-lockdown/crypto_policies Frederick Witty 2025-12-29 09:24:02 -05:00
  • 76cd8c7cb3
    Tidy up wording regarding crypto policy modules thanks to @kpi-nourman #414 Mark Bolwell 2025-12-29 09:43:28 +00:00
  • 67b411400e
    Merge pull request #54 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-12-24 10:11:45 -05:00
  • fe41034da6
    Merge pull request #53 from ansible-lockdown/disable_ipv6_improvements Frederick Witty 2025-12-24 09:06:32 -05:00
  • 7ff8e7b6b9
    Updated disable IPv6 logic George Nalen 2025-12-23 11:20:21 -05:00
  • 8c2597e61b
    Merge pull request #422 from ansible-lockdown/issue_416_fix George Nalen 2025-12-23 11:10:13 -05:00
  • 29a48f7f4c
    updated name info for tasks related to 3.1.1 George Nalen 2025-12-23 09:04:42 -05:00
  • d9927f005b
    fixed typo in disable method var George Nalen 2025-12-23 08:42:28 -05:00
  • f5d7d2294d
    Merge pull request #421 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2025-12-23 09:27:35 +00:00
  • 2b7c8293b8
    fixed linting issue George Nalen 2025-12-22 16:56:24 -05:00
  • beb3bfdc94
    added option for sysctl or kernel for disabling IPv6 George Nalen 2025-12-22 16:35:08 -05:00
  • 96474159ab
    [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2025-12-22 17:33:38 +00:00
  • f15407dcb4
    fix: make 5.3.2.2 idempotent with 5.3.3.1.1 bol7742 2025-12-22 11:28:49 +01:00
  • 62989d258b
    added fix to issue #416 George Nalen 2025-12-19 16:31:37 -05:00
  • 53287f31a9
    Merge pull request #417 from ansible-lockdown/pre-commit-ci-update-config Frederick Witty 2025-12-17 14:43:02 -05:00
  • 322404a692
    [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2025-12-15 17:41:29 +00:00
  • de09b5d150
    Merge pull request #50 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-12-01 11:00:12 -05:00
  • 07885f99b4
    Merge pull request #415 from ansible-lockdown/issue_413 Frederick Witty 2025-12-01 08:53:54 -05:00
  • c04326b2fe
    Merge pull request #51 from ansible-lockdown/priv_413 Frederick Witty 2025-12-01 08:38:43 -05:00
  • f80c60bb8a
    updated with correct fix thanks to @bbaassssiiee Mark Bolwell 2025-12-01 10:41:38 +00:00
  • 571711f11e
    updated with correct fix thanks to @bbaassssiiee Mark Bolwell 2025-12-01 10:23:25 +00:00
  • 52452b1e3c
    issues 413 addressed thansk to @bbaassssiiee Mark Bolwell 2025-11-28 14:51:43 +00:00
  • add8ebb819
    udpated Mark Bolwell 2025-11-28 14:47:00 +00:00
  • ed784d270b
    added fix for issues #413 azure locked passwords Mark Bolwell 2025-11-28 14:44:59 +00:00
  • 32a3473ddc
    updated Mark Bolwell 2025-11-28 14:35:20 +00:00
  • 8b160681f5
    Merge pull request #412 from ansible-lockdown/issue_#410 Frederick Witty 2025-11-25 10:06:32 -05:00
  • 63931388ed
    Merge pull request #49 from ansible-lockdown/priv_410 Frederick Witty 2025-11-25 10:05:47 -05:00
  • dc570e8b53
    add fix provided by @kpi-nourman via discord community Mark Bolwell 2025-11-25 09:29:56 +00:00
  • 72602c63fa
    add fix provided by @kpi-nourman via discord community Mark Bolwell 2025-11-25 09:28:00 +00:00
  • 5091aafcd6
    Merge pull request #411 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2025-11-25 08:46:23 +00:00
  • 539ac4f5cc
    [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2025-11-24 17:42:03 +00:00
  • eb432ddb14
    Merge pull request #409 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2025-11-17 12:07:40 +00:00
  • 0ec943073c
    [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2025-11-10 17:45:49 +00:00
  • a07d03baaf
    Merge pull request #48 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-11-04 17:23:03 -05:00
  • d2dc32d3ba
    updated layout Mark Bolwell 2025-11-04 16:43:37 +00:00
  • 1a3e56c11d
    updated layout Mark Bolwell 2025-11-04 16:37:40 +00:00
  • 28b52876ec
    Merge pull request #408 from ansible-lockdown/auto_issue_to_project Frederick Witty 2025-10-23 15:07:02 -04:00