sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity
763 commits 2 branches 15 tags 2.5 MiB
Commit graph

90 commits

Author SHA1 Message Date
Mark Bolwell
06e96ba769
improvements 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-06-05 23:57:18 +01:00
Mark Bolwell
49296c34a2
tidy up spacing 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-06-05 17:11:17 +01:00
Mark Bolwell
5595097e78
Allowed force for command 5.4.2 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-06-05 09:52:51 +01:00
Mark Bolwell
60a9000dda
Address #191 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-06-05 09:46:14 +01:00
Mark Bolwell
bd7c4e3da2
improved tests based upon #190 thanks to @ipruteanu-sie 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-06-05 08:01:17 +01:00
Mark Bolwell
21e0bc8387
added PR details #193 thanks to @brakkio86 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-06-04 17:53:12 +01:00
uk-bolly
f8fcfe0e78
April_24 updates (#201) 
* Issue #170, PR #181 thanks to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* issue #182, PR #183 thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PR #180 thanks to @ipruteanu-sie and @raabf

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Addressed PR #165 thanks to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PT #184 addressed thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated credits

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* typo and ssh allow_deny comments

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* enable OS check

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* PR - #198 addressed thanks to @brakkio86

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Addressed issue #190

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* Additional vars for issue #190

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated pre-commit version

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* consistent quotes around mode

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* moved audit added discoveries

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* removed unneeded vars

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* audit moved to prelim

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* tidy up

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* improved new variable usage

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed logic 6.2.10

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* addressed #197 thanks to @mark-tomich

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updates for audit section

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* fixed naming

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* updated

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

* added prelim to includes

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-04-15 14:02:07 +01:00
uk-bolly
7d7b6132f4
March 24 to devel (#186) 
* Issue #170, PR #181 thanks to @ipruteanu-sie

* issue #182, PR #183 thansk to @ipruteanu-sie

* PR #180 thanks to @ipruteanu-sie and @raabf

* Addressed PR #165 thanks to @ipruteanu-sie

* PT #184 addressed thansk to @ipruteanu-sie

* updated credits

* typo and ssh allow_deny comments

* enable OS check

---------

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2024-03-06 16:52:38 +00:00
Bas Meijer
cc7f9ccfd0
X11Forwarding found in /etc/ssh/sshd_config.d/50-redhat.conf 
Signed-off-by: Bas Meijer <bas.meijer@me.com>
 2024-02-10 00:43:17 +01:00
Bas Meijer
baf8987a5f
PermitRootLogin found in /etc/ssh/sshd_config.d/01-permitrootlogin.conf 
Signed-off-by: Bas Meijer <bas.meijer@me.com>
 2024-02-10 00:43:17 +01:00
uk-bolly
902956e51d
Merge pull request #151 from sickbock/devel 
Corrections to tags and a variable
 2024-01-26 12:37:20 +00:00
uk-bolly
ac5eee81df
Merge pull request #112 from siemens/siemens/feat/ensure_default_umask_027_5_6_5 
Adding new entry in /etc/pam.d/system-auth
 2024-01-26 12:32:45 +00:00
Joachim la Poutré
3b256ff831
Update cis_5.6.1.x.yml 
Corrected tag: rule_5.6.1.5

Signed-off-by: Joachim la Poutré <14360383+sickbock@users.noreply.github.com>
 2024-01-03 11:16:20 +01:00
Joachim la Poutré
712b8b6ecd
Update cis_5.6.1.x.yml 
Corrected tag: rule_5.6.1.1

Signed-off-by: Joachim la Poutré <14360383+sickbock@users.noreply.github.com>
 2024-01-03 11:15:11 +01:00
uk-bolly
e545b89c7b
Merge pull request #145 from siemens/siemens/feat/5.4.2_addVarUsage 
Using rhel9cis_authselect['options'], otherwise not used at all
 2023-12-21 08:39:48 +00:00
Ionut Pruteanu
c19e350b7d
Using rhel9cis_authselect['options'], otherwise not used at all 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
 2023-12-08 16:44:30 +02:00
Senih
cce2b25d80
Update cis_5.6.1.x.yml 
Typo fixed from:
- rule_5.5.1.3
to:
- rule_5.6.1.3

Signed-off-by: Senih <40578755+senihucar@users.noreply.github.com>
 2023-11-23 12:02:37 -08:00
root@DERVISHx
c6a51ad38a
Adding new entry in /etc/pam.d/system-auth 
Signed-off-by: root@DERVISHx <nuno.carvalho@siemens.com>
 2023-11-10 15:28:12 +00:00
Mark Bolwell
729fac3580
updated 5.6.5 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-22 08:44:43 +01:00
Mark Bolwell
e82b2cefac
quoted file mode 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-21 16:25:59 +01:00
Mark Bolwell
580ee762ee
fix filename 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-21 15:35:35 +01:00
Mark Bolwell
c5ed197e03
import_tasks file added 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-21 15:07:52 +01:00
Mark Bolwell
a67a484971
import_tasks file added 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-09-21 14:55:55 +01:00
Mark Bolwell
b631459e9b
fix typo in bashrc path 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-07-28 15:09:52 +01:00
Mark Bolwell
81b2f06dab
updated 5.6.5 logic 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-07-26 17:17:45 +01:00
Mark Bolwell
a791c81cf2
5.5.3 fix and update 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-07-26 11:42:21 +01:00
Mark Bolwell
ddec58c419
#66 5.6.5 regex improvment 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-06-28 10:49:55 +01:00
Mark Bolwell
2da0d870c8
#57 
great catch

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-05-16 11:56:07 +01:00
Mark Bolwell
195e42e3ea
removed line and updated requirement #53 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-05-16 08:52:45 +01:00
Mark Bolwell
7c09b264a1
fixed layout 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-05-16 08:52:18 +01:00
Jay Olinares
7f9b45cea3
tags added 
Signed-off-by: Jay Olinares <jay.olinares@gmail.com>
 2023-05-12 12:46:50 +10:00
Jay Olinares
2317abd1d2
fix https://github.com/ansible-lockdown/RHEL9-CIS/issues/58 
Signed-off-by: Jay Olinares <jay.olinares@gmail.com>
 2023-05-04 11:37:57 +10:00
Jay Olinares
fb4216be9f
use var values for pam_faillock 
Signed-off-by: Jay Olinares <jay.olinares@gmail.com>
 2023-04-15 22:21:53 +10:00
Marcin Dulinski
74e96cedd3
Fix system accounts 
Signed-off-by: Marcin Dulinski <marcin.dulinski@g.network>
 2023-03-17 14:39:07 +00:00
Mark Bolwell
868e74bbf4
issue 41 5.3.7 tasks 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-13 09:44:51 +00:00
Mark Bolwell
5e5174a5b0
updated marker 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-10 15:19:35 +00:00
Mark Bolwell
a14e9c5dbe
#30 thanks to @smatterchew sshd config file dropin ability 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-20 11:31:46 +00:00
Mark Bolwell
939102430c
lint updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 14:03:32 +00:00
Mark Bolwell
bf83a6b84c
Add more safety around control 5.4.2 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 12:19:16 +00:00
Mark Bolwell
3c72af6a83
fixed spacing 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 11:03:36 +00:00
Mark Bolwell
a759c38902
removed split filter allowing old ansible versions 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 11:03:23 +00:00
Mark Bolwell
d770c69aca
moved 5.6.6 testing to main task 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 11:01:41 +00:00
Mark Bolwell
9cf1f08eec
dest to path 5.2.1 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 14:59:18 +00:00
Mark Bolwell
388dbd797c
fix typo 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 14:17:29 +00:00
Mark Bolwell
89e6372648
5.6.3 tidy up 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 09:47:33 +00:00
Mark Bolwell
abd99426b8
replaced dest for path on file module 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 09:31:27 +00:00
Mark Bolwell
8694bfde75
with_items to loop 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 08:30:26 +00:00
Mark Bolwell
f9267a389b
remove state file on file module 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 08:29:03 +00:00
Mark Bolwell
3f76affa5b
changed_when for idempotency. 5.6. 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-20 13:34:30 +00:00
Mark Bolwell
999d7b5b1e
fix csv sugroup option updated 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-19 13:33:11 +00:00