ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2026-05-10 07:33:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Commit graph

  • 79407ea862
         Merge 0f47e4694c into c7ed4de9a8 ddougan89 2026-04-30 19:57:09 +00:00
  • 0f47e4694c
         lint fix DayneD89 2026-04-30 14:56:43 -05:00
  • 5ab951145c
         Apply container guards and skips for CIS hardening DayneD89 2026-04-30 14:48:38 -05:00
  • c7ed4de9a8
         Merge pull request #444 from ansible-lockdown/april26 devel uk-bolly 2026-04-16 17:03:34 +01:00
  • 2ac71da85c
         updated handlers Mark Bolwell 2026-04-10 16:54:31 +01:00
  • 2d1ae800b3
         fixed typo Mark Bolwell 2026-04-08 16:10:55 +01:00
  • 420e036a56
         updated pkg and mask logic Mark Bolwell 2026-04-08 13:58:06 +01:00
  • 53561fbf08
         Improved mask logic and package names Mark Bolwell 2026-04-08 13:51:01 +01:00
  • 90fcfbe266
         Merge c88d3dec49 into bbc7eada94 Michael Hicks 2026-04-08 13:33:26 +01:00
  • 201edf02e4
         QA, lint, standards, var naming, title aming aligned Mark Bolwell 2026-04-08 12:56:24 +01:00
  • 69bef1f371
         bootloader updates Mark Bolwell 2026-04-08 12:55:50 +01:00
  • dab815f7b6
         lin and 7.1.12/13 logic improvements Mark Bolwell 2026-04-08 12:53:02 +01:00
  • 2b17f3f168
         updated tags on optional Mark Bolwell 2026-04-08 12:52:40 +01:00
  • 5dfa35a487
         Improved logic for masked steps Mark Bolwell 2026-04-08 12:52:25 +01:00
  • 5783bf4ce4
         Workflow updates Mark Bolwell 2026-04-08 12:51:49 +01:00
  • bbc7eada94
         Merge pull request #443 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2026-04-08 11:33:30 +01:00
  • 00f7166596
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-04-06 17:44:16 +00:00
  • 9639444174
         Merge pull request #441 from ansible-lockdown/pre-commit-ci-update-config Frederick Witty 2026-03-26 12:37:25 -04:00
  • 4288de9944
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-03-23 17:39:30 +00:00
  • eedb2188c3
         Merge pull request #438 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2026-03-18 17:46:10 +00:00
  • 5e8ff2dc4a
         Merge pull request #439 from defnotyujine/fix_5.2.4 uk-bolly 2026-03-18 17:45:55 +00:00
  • 871c75d09e
         Merge pull request #437 from defnotyujine/fix-5.3.3.2.7 uk-bolly 2026-03-18 17:45:13 +00:00
  • ab6254aa7a
         Merge pull request #436 from defnotyujine/fix_5.1.10_5.1.11 uk-bolly 2026-03-18 17:43:04 +00:00
  • decb9061d5
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-03-16 17:45:10 +00:00
  • ce40cd630c
         Added missing variable for task 5.2.4 defnotyujine 2026-03-10 17:19:22 +08:00
  • e6ccdea365
         Updated Jinja template to fix compliance issues for control 5.3.3.2.7 defnotyujine 2026-03-09 19:14:33 +08:00
  • 83cf830f36
         Added always tag to ensure variable exists on CIS profile tag-based execution defnotyujine 2026-03-09 14:55:38 +08:00
  • c88d3dec49
         fixed extra line based yaml lint failing issue Michael Hicks 2026-03-04 11:30:12 -08:00
  • c4a97079b1
         added guardrails on enabled and state flags to systemd mask tasks to only disable and stop when the package is installed, otherwise just mask to prevent the service from ever starting should it get installed at a later time. This allows hardening to proceed when the service doesn't exist but masking has been requested. Otherwise the playbook run will fail at a step when the service which comes with the package doesn't already exist Michael Hicks 2026-03-04 10:40:41 -08:00
  • 497b3dc8d9
         Merge pull request #433 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2026-03-03 09:55:07 +00:00
  • e6ba3cea4a
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-03-02 17:47:33 +00:00
  • b98381fcd8
         Merge pull request #432 from ansible-lockdown/devel 2.2.0 main uk-bolly 2026-02-27 11:43:24 +00:00
  • 587dfb40cf
         Merge pull request #429 from ansible-lockdown/pub_feb26_updates Frederick Witty 2026-02-12 10:14:46 -05:00
  • 25b9934ce0
         removed dup key Mark Bolwell 2026-02-12 12:17:31 +00:00
  • 3015e2fe2f
         Merge branch 'devel' into pub_feb26_updates uk-bolly 2026-02-12 09:54:10 +00:00
  • 032c75924e
         Tidy up 5.3.2.1 Mark Bolwell 2026-02-12 09:49:52 +00:00
  • 98e89d8945
         Latest fixes updates Feb26 Mark Bolwell 2026-02-12 09:15:05 +00:00
  • 3cfcf00717
         Merge pull request #63 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-11 17:01:56 -05:00
  • f413385208
         Update .j2 branding Frederick Witty 2026-02-11 15:39:59 -05:00
  • 4aa09d558f
         Merge pull request #61 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-11 15:19:20 -05:00
  • 71206432be
         QA fixes and rollback of audit_only logic Frederick Witty 2026-02-11 14:54:30 -05:00
  • 15ebe5500b
         Merge pull request #428 from draygoX/devel uk-bolly 2026-02-11 09:32:37 +00:00
  • 11becb32c5
         QA Fixes Frederick Witty 2026-02-10 16:01:05 -05:00
  • a6aa5895d5
         Merge pull request #60 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-06 10:24:39 -05:00
  • 2863be6c02
         tidied up comments to make it simpler Mark Bolwell 2026-02-06 14:16:29 +00:00
  • 591f0d90f4
         Updated comments for password hash and variable Mark Bolwell 2026-02-06 12:49:05 +00:00
  • 0a77d6859f
         Merge pull request #59 from ansible-lockdown/Feb26_updates Frederick Witty 2026-02-05 16:01:24 -05:00
  • 3442801399
         tidy up of variables and warning for bootloader password Mark Bolwell 2026-02-05 20:28:52 +00:00
  • 9a3f458db0
         Updated bootloader password logic and enabled old methods without change Mark Bolwell 2026-02-05 18:10:29 +00:00
  • 9b091984db
         updated logic to allow manual hash to be added or filter Mark Bolwell 2026-02-05 17:53:55 +00:00
  • f1786fe20f
         added passlib dependency documentation Mark Bolwell 2026-02-05 10:39:04 +00:00
  • 83ee942ecf
         updated Mark Bolwell 2026-02-03 09:18:36 +00:00
  • 943b570484
         incorporated PR 345 thanks to @thulium-drake Mark Bolwell 2026-02-03 09:01:55 +00:00
  • c7567a98ac
         fixed tags and audit logic Mark Bolwell 2026-02-03 08:57:45 +00:00
  • eb9c96f335
         Updated Company title Mark Bolwell 2026-02-01 20:13:34 +00:00
  • 2708a28409
         removed schedule tasks Mark Bolwell 2026-02-01 20:09:48 +00:00
  • 3e27eb88de
         Updated Mark Bolwell 2026-02-01 20:09:10 +00:00
  • db0b08762e
         fixed typo thats to Eugene @Frequentis Mark Bolwell 2026-02-01 19:54:22 +00:00
  • 63d2ce7d2d
         removed legacy option Mark Bolwell 2026-02-01 19:53:50 +00:00
  • 8126665a02
         Move rhel9cis_ipv6_disable_method to a better location draygoX 2026-01-23 13:15:08 -06:00
  • 663f84d1fe
         Merge pull request #427 from ansible-lockdown/devel 2.1.0 uk-bolly 2026-01-26 12:00:22 +00:00
  • e6a29ab36d
         Merge pull request #426 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2026-01-22 08:48:58 +00:00
  • d3f24d9d94
         Merge pull request #420 from bol7742/patch-1 uk-bolly 2026-01-22 08:48:38 +00:00
  • c1f4b780be
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2026-01-19 17:44:50 +00:00
  • 6b986a7352
         Merge pull request #57 from ansible-lockdown/2026Jan_Updates Frederick Witty 2026-01-08 16:41:35 -05:00
  • e65df16f67
         Update 3.1.1 Frederick Witty 2026-01-08 14:33:16 -05:00
  • 173fbd3254
         Linting Frederick Witty 2026-01-08 14:26:24 -05:00
  • 10f88cc1a3
         update vars to rhel9 Frederick Witty 2026-01-08 14:13:07 -05:00
  • 309ff4cdd7
         Fixes from Public Issue 418 and 419 + Lic year Frederick Witty 2026-01-08 14:08:35 -05:00
  • b2d08552c5
         Merge pull request #425 from ansible-lockdown/2026Jan_Updates Frederick Witty 2026-01-08 13:50:20 -05:00
  • 02132181e6
         update changelog Frederick Witty 2026-01-08 12:24:44 -05:00
  • 22a9b085d7
         fix for #419, thank you @aaronk1 Frederick Witty 2026-01-08 12:23:40 -05:00
  • 87cd0f3eb5
         fix for #418 and update Lic year Frederick Witty 2026-01-08 09:40:08 -05:00
  • 2d02d8b048
         Merge pull request #56 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-12-30 14:42:39 -05:00
  • fb74617694
         Merge pull request #55 from ansible-lockdown/disable_ipv6_improvements Frederick Witty 2025-12-30 10:19:52 -05:00
  • 923cba3ca5
         Merge pull request #424 from ansible-lockdown/issue_416_fix Frederick Witty 2025-12-30 10:18:50 -05:00
  • 5d1143ff87
         Update changelog Frederick Witty 2025-12-30 08:21:47 -05:00
  • fefd2c94b2
         Update ansible_vars_goss with var rhel9cis_ipv6_disable_method Frederick Witty 2025-12-30 08:17:57 -05:00
  • ac83c8cf35
         Update audit vars to add rhel9cis_ipv6_disable_method: {{ rhel9cis_ipv6_disable_method }} Frederick Witty 2025-12-29 17:18:05 -05:00
  • 863d1af4cf
         Merge pull request #423 from ansible-lockdown/crypto_policies Frederick Witty 2025-12-29 09:24:02 -05:00
  • 76cd8c7cb3
         Tidy up wording regarding crypto policy modules thanks to @kpi-nourman #414 Mark Bolwell 2025-12-29 09:43:28 +00:00
  • 67b411400e
         Merge pull request #54 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-12-24 10:11:45 -05:00
  • fe41034da6
         Merge pull request #53 from ansible-lockdown/disable_ipv6_improvements Frederick Witty 2025-12-24 09:06:32 -05:00
  • 7ff8e7b6b9
         Updated disable IPv6 logic George Nalen 2025-12-23 11:20:21 -05:00
  • 8c2597e61b
         Merge pull request #422 from ansible-lockdown/issue_416_fix George Nalen 2025-12-23 11:10:13 -05:00
  • 29a48f7f4c
         updated name info for tasks related to 3.1.1 George Nalen 2025-12-23 09:04:42 -05:00
  • d9927f005b
         fixed typo in disable method var George Nalen 2025-12-23 08:42:28 -05:00
  • f5d7d2294d
         Merge pull request #421 from ansible-lockdown/pre-commit-ci-update-config uk-bolly 2025-12-23 09:27:35 +00:00
  • 2b7c8293b8
         fixed linting issue George Nalen 2025-12-22 16:56:24 -05:00
  • beb3bfdc94
         added option for sysctl or kernel for disabling IPv6 George Nalen 2025-12-22 16:35:08 -05:00
  • 96474159ab
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2025-12-22 17:33:38 +00:00
  • f15407dcb4
         fix: make 5.3.2.2 idempotent with 5.3.3.1.1 bol7742 2025-12-22 11:28:49 +01:00
  • 62989d258b
         added fix to issue #416 George Nalen 2025-12-19 16:31:37 -05:00
  • 53287f31a9
         Merge pull request #417 from ansible-lockdown/pre-commit-ci-update-config Frederick Witty 2025-12-17 14:43:02 -05:00
  • 322404a692
         [pre-commit.ci] pre-commit autoupdate pre-commit-ci[bot] 2025-12-15 17:41:29 +00:00
  • de09b5d150
         Merge pull request #50 from ansible-lockdown/benchmark_v2.0.0 Frederick Witty 2025-12-01 11:00:12 -05:00
  • 07885f99b4
         Merge pull request #415 from ansible-lockdown/issue_413 Frederick Witty 2025-12-01 08:53:54 -05:00
  • c04326b2fe
         Merge pull request #51 from ansible-lockdown/priv_413 Frederick Witty 2025-12-01 08:38:43 -05:00
  • f80c60bb8a
         updated with correct fix thanks to @bbaassssiiee Mark Bolwell 2025-12-01 10:41:38 +00:00
  • 571711f11e
         updated with correct fix thanks to @bbaassssiiee Mark Bolwell 2025-12-01 10:23:25 +00:00