ansible-hardening

History

This patch makes it easier for deployers to customize their login
banner and it also fixes some documentation bugs around how to
configure the graphical login banner.

Closes-bug: 1679749
Change-Id: I755de63cc3965f065077c983dbf1015ad93dfa6c

2017-04-05 08:32:39 -05:00

.placeholder

Add reno scaffolding for release notes management

2016-04-28 23:15:13 +00:00

add-v38438-3f7e905892be4b4f.yaml

Adding V-38438 (auditd during boot)

2016-09-06 13:21:11 +00:00

adding-v38526-381a407caa566b14.yaml

Implemented: V-38526.

2016-08-18 08:26:56 -05:00

adding-v38548-9c51b30bf9780ff3.yaml

Implemented: V-38548.

2016-08-23 16:07:48 +00:00

aide-exclude-run-4d3c97a2d08eb373.yaml

Exclude /run from AIDE checks

2016-08-26 09:17:18 -05:00

aide-initialization-fix-16ab0223747d7719.yaml

Ensure AIDE initializes on subsequent runs

2016-08-25 12:56:35 +00:00

auditing-mac-policy-changes-fb83e0260a6431ed.yaml

Adding audit rule for SELinux policy modifications

2016-05-27 13:28:02 +00:00

augenrules-restart-39fe3e1e2de3eaba.yaml

Restart auditd after running augenrules

2016-06-09 15:14:42 -05:00

chrony-config-variable-7a1a7862c05c9675.yaml

Speed up package install/removal

2016-11-03 13:30:56 -05:00

configurable-martian-logging-370ede40b036db0b.yaml

Disable martian logging by default

2016-08-31 15:56:05 -05:00

customizable-login-banner-string-d8d5ae874e8e49f3.yaml

Make login banner customizable

2017-04-05 08:32:39 -05:00

dictionary-variables-removed-957c7b7b2108ba1f.yaml

Switch from dict to individual variables

2016-05-05 08:32:38 -05:00

disable-failed-access-audit-logging-789dc01c8bcbef17.yaml

Switch from dict to individual variables

2016-05-05 08:32:38 -05:00

disable-graphical-interface-5db89cd1bef7e12d.yaml

Setting default runlevel/target to non-graphical

2016-05-31 10:39:02 -05:00

disable-netconsole-service-915bb33449b4012c.yaml

Disable the netconsole service (if present)

2016-05-20 15:41:13 -05:00

disable-rpm-perms-fix-by-default-b164e39717f0ada7.yaml

Disable file perm/ownership reset

2017-03-04 15:27:45 +00:00

disabling-rdisc-centos-75115b3509941bfa.yaml

Disable the rdisc service (if present)

2016-05-23 07:50:02 -05:00

enable-lsm-bae903e463079a3f.yaml

Enable LSM instead of checking status

2016-05-26 09:16:42 -05:00

enable-tcp-syncookes-boolean-4a884a66a3a0e4d7.yaml

Adjust TCP syncookes variable to bool

2016-08-09 08:29:31 -05:00

fix-audit-log-permission-bug-81a772e2e6d0a5b3.yaml

Fix auditd log permission bug

2016-05-23 16:02:36 -05:00

fix-check-mode-with-tags-bf798856a27c53eb.yaml

Set check_mode variable every time

2016-06-07 13:05:49 -05:00

handling-sshd-match-stanzas-fa40b97689004e46.yaml

Handle Match properly in sshd_config

2016-05-09 16:07:47 -05:00

implemented-v38524-b357edec95128307.yaml

Add release note for V-38524 implementation

2016-06-09 13:02:49 +00:00

improved-audit-rule-keys-9fa85f758386446c.yaml

Add key fields to audit rules

2016-06-09 13:42:21 -05:00

ntp-bind-local-interfaces-only-05f03de632e81097.yaml

Add new parameter 'security_ntp_bind_local_interfaces_only'

2016-05-27 11:08:17 +00:00

package-state-6684c5634bdf127a.yaml

Add ability to change apt/yum package state

2016-08-02 16:01:01 +01:00

package-state-present-951161faa5384abd.yaml

Change package state to 'present'

2016-11-14 14:17:58 -06:00

reduce-auditd-logging-633677a74aee5481.yaml

Disable DAC change auditing

2016-09-07 07:38:11 -05:00

rhel7-stig-default-f6c7c97498a8b2e7.yaml

Enable RHEL 7 STIG tasks as default [+Docs]

2017-01-13 19:06:07 +00:00

rhel-gpg-check-0b483a824314d1b3.yaml

Add initial support for Red Hat Enterprise Linux 7

2016-06-09 09:02:50 -05:00

search-for-unlabeled-devices-cb047c5f767e93ce.yaml

Search for unlabeled device files

2016-06-01 20:08:30 +00:00

shosts-file-search-opt-in-887f600a79eef07e.yaml

Make .shosts search/removal opt in

2017-03-07 12:14:15 -06:00

stig-rhel7-version-1-renumbering-fiesta-aa047fea3ea35e74.yaml

Handle RHEL 7 STIG renumbering

2017-04-04 07:22:12 -05:00

support-for-centos-xenial-2b89c318cc3df4b0.yaml

Add CentOS 7 and Ubuntu 16.04 support

2016-05-13 14:57:28 -05:00

unique-variable-migration-c0639030b495438f.yaml

Migrate to unique variable names

2016-05-09 16:18:48 -05:00