4
0
Fork 0
Commit graph

60 commits

Author SHA1 Message Date
Mark Bolwell
bd1547313a
Fix logic and notes for in crypto policy building
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-20 11:29:53 +01:00
Mark Bolwell
9f50effd30
updated logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-16 10:01:10 +01:00
Mark Bolwell
30bb04b1d4
updates root password check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-06-12 12:10:44 +01:00
Mark Bolwell
52f5f23b00
improve ansible facts conditionals
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-15 11:04:33 +01:00
Mark Bolwell
bd425a068d
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-01 08:14:02 +01:00
Mark Bolwell
9bbf5b7a81
updated var name to remove capital
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-04-01 08:08:28 +01:00
Mark Bolwell
576531e986
fetch audit and compliance facts added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-03-31 14:50:40 +01:00
Mark Bolwell
5a612675e2
improve authselect logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-02-26 14:04:01 +00:00
Mark Bolwell
3d0cbce21e
Updated title for authselect checks
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-23 14:14:46 +00:00
Mark Bolwell
2de8a39cdc
updated yamllint, company naming, linting and spacing
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-04 12:00:12 +00:00
Mark Bolwell
879d9c9a1b
lint and var renaming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-11-04 18:39:01 +00:00
Mark Bolwell
671ba154e7
linting updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-08-09 13:47:38 +01:00
Mark Bolwell
265423eb0a
improved tests and updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-08-09 13:13:17 +01:00
Mark Bolwell
565ef20715
updated authselect logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-08-08 11:08:09 +01:00
Mark Bolwell
2a7d08da08
improvements
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-08-07 10:31:31 +01:00
Mark Bolwell
6ea105374a
Initial v2
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-07-24 14:03:12 +01:00
Mark Bolwell
a53569a474
section 2 v2.0.0 update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-07-22 12:43:35 +01:00
Mark Bolwell
8b58d71e4b
section1 v2 initial
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-07-19 17:01:23 +01:00
uk-bolly
f8fcfe0e78
April_24 updates (#201)
* Issue #170, PR #181 thanks to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* issue #182, PR #183 thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PR #180 thanks to @ipruteanu-sie and @raabf

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Addressed PR #165 thanks to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PT #184 addressed thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated credits

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* typo and ssh allow_deny comments

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* enable OS check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PR - #198 addressed thanks to @brakkio86

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Addressed issue #190

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Additional vars for issue #190

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated pre-commit version

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* consistent quotes around mode

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* moved audit added discoveries

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* removed unneeded vars

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* audit moved to prelim

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tidy up

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* improved new variable usage

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed logic 6.2.10

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* addressed #197 thanks to @mark-tomich

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updates for audit section

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed naming

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* added prelim to includes

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-04-15 14:02:07 +01:00
uk-bolly
7d7b6132f4
March 24 to devel (#186)
* Issue #170, PR #181 thanks to @ipruteanu-sie

* issue #182, PR #183 thansk to @ipruteanu-sie

* PR #180 thanks to @ipruteanu-sie and @raabf

* Addressed PR #165 thanks to @ipruteanu-sie

* PT #184 addressed thansk to @ipruteanu-sie

* updated credits

* typo and ssh allow_deny comments

* enable OS check

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-03-06 16:52:38 +00:00
uk-bolly
40bc7aa082
Feb24 updates (#179)
* change logic thanks to @rjacobs1990 see #175

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* thanks to @ipruteani-sie #134

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Thanks to @stwongst #125

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* thanks to @sgomez86 #146

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Added updates from #115

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* removed rp_filter in post added in error

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated yamllint precommit

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated fqcn fo json_query

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fix typo for virt type query

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-02-20 15:43:43 +00:00
John Foster
467434a56f
Added blank line between each named task for consistency.
Signed-off-by: John Foster <robopickle@proton.me>
2024-02-19 12:03:08 +00:00
John Foster
0e89fedfca
Adjusted tasks/main.yml indentation after running precommit checks
Signed-off-by: John Foster <robopickle@proton.me>
2024-02-15 10:17:41 +00:00
John Foster
7fde313f85
Main task was failing when using an AD account to connect to host.
With an AD account there isn't an entry in the /etc/shadow file. This
caused the password length check to treat it as a zero length password.
Now local password check is skipped for AD account.
Also added an additional check for a locked local account for the sudo
user.

Signed-off-by: John Foster <robopickle@proton.me>
2024-02-13 15:37:39 +00:00
Mark Bolwell
23a4386e95
addition of audit_only config
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-11-21 09:49:36 +00:00
Mark Bolwell
11071a66ab
added pragma allowed
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-21 15:36:05 +01:00
Mark Bolwell
e202d4bd68
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-21 14:55:00 +01:00
Mark Bolwell
04cb2e0f1d
#54 merged into new layout
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-09-06 08:44:23 +01:00
Mark Bolwell
73cf599e48
removed quotes not required
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-08-10 08:28:43 +01:00
Mark Bolwell
7c34f61d11
#72 improve password check
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-07-26 08:50:53 +01:00
Mark Bolwell
612bb01895
fixed error in assert user password set
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-06-28 11:34:15 +01:00
Mark Bolwell
194925be2f
consistent vars and names
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-06-07 09:24:32 +01:00
Mark Bolwell
674d3417ff
rule_1.10 updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-06-06 14:36:38 +01:00
Mark Bolwell
42b9dc9e89
Linting
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-03-20 15:16:15 +00:00
Mark Bolwell
98feeb1b01
5.6.6 test added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-27 11:02:01 +00:00
Mark Bolwell
9fe177f9ce
standardise naming and move items to prelim
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-25 11:35:47 +00:00
Mark Bolwell
2a39d54f41
remove conditional for parse etc passwd
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-25 09:41:47 +00:00
Mark Bolwell
64a3e26e4f
moved su check to prelim
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-25 09:29:19 +00:00
Mark Bolwell
9d4120468e
Thanks to @keystone-admin on discord missing tag
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-18 16:00:18 +00:00
Mark Bolwell
acf0104f7a
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-13 12:10:18 +00:00
Mark Bolwell
3ead0d63ac
warn control count updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-13 11:05:25 +00:00
Mark Bolwell
77dd593e0f
removed arg warn
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-10 11:19:41 +00:00
Mark Bolwell
1e22c13794
linting
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-09-16 11:04:19 +01:00
Mark Bolwell
e4bf188383
Added Assertion for passwd set on ansible user
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-09-07 13:35:36 +01:00
Mark Bolwell
595b952089
tidy up ttle
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-07-25 14:52:48 +01:00
Mark Bolwell
e6191de7ed
fix logic in warning
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-07-25 13:26:29 +01:00
Mark Bolwell
77a73ddcae
tidy up warning message
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-07-25 11:28:50 +01:00
Mark Bolwell
6b6a4a32c8
added warning count
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-07-20 17:13:33 +01:00
Mark Bolwell
4336bbf6b6
auditd, sysctl, become tidy up
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-06-20 17:07:39 +01:00
Mark Bolwell
91600af889
yamllint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2022-04-26 16:01:56 +01:00