sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity
521 commits 2 branches 15 tags 2.5 MiB
Commit graph

260 commits

Author SHA1 Message Date
Mark Bolwell
c7d72b564b
4.1.3.6 command improvement 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-05-17 15:42:30 +01:00
Mark Bolwell
2da0d870c8
#57 
great catch

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-05-16 11:56:07 +01:00
Mark Bolwell
195e42e3ea
removed line and updated requirement #53 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-05-16 08:52:45 +01:00
Mark Bolwell
7c09b264a1
fixed layout 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-05-16 08:52:18 +01:00
uk-bolly
aa2c44a14f
Merge pull request #60 from jayolinares/pamConfigs_faillock 
fix https://github.com/ansible-lockdown/RHEL9-CIS/issues/58
 2023-05-12 12:00:13 +01:00
Jay Olinares
7f9b45cea3
tags added 
Signed-off-by: Jay Olinares <jay.olinares@gmail.com>
 2023-05-12 12:46:50 +10:00
uk-bolly
623d2fca61
Merge pull request #56 from drscream/fix/regex-escape 
Use correct backtick for regex escape
 2023-05-11 16:13:24 +01:00
Thomas Merkel
2380cd46c9
Use correct backtick for regex escape 
Depends on the ansible version regex escape (via slash) require correct
backticks to work. Otherwise it would result in a syntax error.

Signed-off-by: Thomas Merkel <tm@core.io>
 2023-05-04 19:40:19 +02:00
uk-bolly
021766a9b8
Merge pull request #55 from jayolinares/skipModprobe_container 
Molecule test on container is failing due to modprobe
 2023-05-04 14:32:37 +01:00
Jay Olinares
2317abd1d2
fix https://github.com/ansible-lockdown/RHEL9-CIS/issues/58 
Signed-off-by: Jay Olinares <jay.olinares@gmail.com>
 2023-05-04 11:37:57 +10:00
Stephen Williams
c20b5ed647
Merge pull request #52 from jayolinares/faillock-vars 
use var values for pam_faillock
 2023-04-26 10:57:36 -04:00
Jay Olinares
02c9c76a83
Molecule test on container is failing due to modprobe 
Signed-off-by: Jay Olinares <jay.olinares@gmail.com>
 2023-04-21 09:04:13 +10:00
Jay Olinares
fb4216be9f
use var values for pam_faillock 
Signed-off-by: Jay Olinares <jay.olinares@gmail.com>
 2023-04-15 22:21:53 +10:00
Mark Bolwell
a5df4c2f38
fix_typos 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-04-13 09:23:10 +01:00
Mark Bolwell
120a0ea751
updated layout 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-04-12 13:10:42 +01:00
Mark Bolwell
b9e17f74d1
updated controls 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-04-12 13:05:26 +01:00
Stephen Williams
4a40facca9
Readme Update, Yamllint Update 
Signed-off-by: Stephen Williams <stephenw@mindpointgroup.com>
 2023-04-10 13:48:47 -04:00
Mark Bolwell
42b9dc9e89
Linting 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-20 15:16:15 +00:00
Marcin Dulinski
74e96cedd3
Fix system accounts 
Signed-off-by: Marcin Dulinski <marcin.dulinski@g.network>
 2023-03-17 14:39:07 +00:00
Mark Bolwell
181002c23b
added benchamrk audit validation 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-13 14:04:38 +00:00
Mark Bolwell
67f7c44ca8
tidy up control not required 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-13 09:45:26 +00:00
Mark Bolwell
868e74bbf4
issue 41 5.3.7 tasks 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-13 09:44:51 +00:00
Mark Bolwell
5e5174a5b0
updated marker 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-10 15:19:35 +00:00
Mark Bolwell
ebdb8b9129
Updated layout 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-10 15:08:12 +00:00
Mark Bolwell
5a928b4304
Issue #38 thanks to bdwyertech 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-07 11:02:15 +00:00
Mark Bolwell
e04da88df4
Added OracleLinux support 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-06 11:22:08 +00:00
Mark Bolwell
3de7cd2f56
use new variable gpg_key_variable 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-06 11:21:33 +00:00
Mark Bolwell
03e4b0e57f
variable naming 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-01 10:17:37 +00:00
Mark Bolwell
58d3bb4e41
updated var naming 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-01 09:17:38 +00:00
Mark Bolwell
b88dca6954
updated warning for template updated 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-03-01 09:10:39 +00:00
Mark Bolwell
37f0eec4d4
Added audit template change warn control 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-28 14:28:48 +00:00
Mark Bolwell
7459f1d445
idempontency improvements 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-27 17:26:34 +00:00
Mark Bolwell
969ee917ba
#36 thanks to @fahadysf 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-27 17:26:15 +00:00
Mark Bolwell
e0a490e1d5
Added POST to name 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-27 17:25:45 +00:00
Mark Bolwell
52a293e9a1
removed register 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-27 17:25:32 +00:00
Mark Bolwell
b9b283fd52
added fix for issue #30 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-20 14:16:15 +00:00
Mark Bolwell
a14e9c5dbe
#30 thanks to @smatterchew sshd config file dropin ability 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-20 11:31:46 +00:00
Mark Bolwell
e5ce163fcf
new option to 6_2_16 not follow symlinks 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-02-14 08:54:21 +00:00
Mark Bolwell
e52cc6ca6b
4.1.4.8 tidy title remove register not used 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-31 08:31:12 +00:00
Mark Bolwell
939102430c
lint updates 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 14:03:32 +00:00
Mark Bolwell
bf83a6b84c
Add more safety around control 5.4.2 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 12:19:16 +00:00
Mark Bolwell
e88b3efbf0
Updated as per steps 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 11:13:33 +00:00
Mark Bolwell
3c72af6a83
fixed spacing 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 11:03:36 +00:00
Mark Bolwell
a759c38902
removed split filter allowing old ansible versions 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 11:03:23 +00:00
Mark Bolwell
98feeb1b01
5.6.6 test added 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 11:02:01 +00:00
Mark Bolwell
d770c69aca
moved 5.6.6 testing to main task 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-27 11:01:41 +00:00
Mark Bolwell
2168a68b4e
removed success_msg 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 16:03:29 +00:00
Mark Bolwell
50429d8278
moved notify to task 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 16:02:12 +00:00
Mark Bolwell
aa5b2c30c4
6.2.8 rewrite 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 15:01:12 +00:00
Mark Bolwell
b5a5d3e951
Additional; step to show diff of template 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
 2023-01-26 15:00:10 +00:00