Code

Merge devel to main for release#167

Code

Merged

uk-bolly merged 122 commits intomainansible-lockdown/UBUNTU22-CIS:mainfrom develansible-lockdown/UBUNTU22-CIS:develCopy head branch name to clipboardNov 9, 2023

+683-362

Commits

Commits on Sep 26, 2023

• Update mode single quotes and typo fixes-1

  Show description for 30f7d67
  frederickw082922

  committed
  30f7d67

• Typo fixes-1

  Show description for 1c28564
  frederickw082922

  committed
  1c28564

• Typo fixes and yamllint lenth added to .ansible-lint

  Show description for fe87570
  frederickw082922

  committed
  fe87570

Commits on Sep 27, 2023

• fixes a typo in 2.1.1.1

  Show description for 7bd99bb
  dderemiah

  committed
  7bd99bb

• Fixing conditional for rule2.2.2(issue #108), to prevent always being skipped

  Show description for 5d0f577
  ipruteanu-sie

  committed
  5d0f577

• Fixing conditional by removing extra condition in when rule1.1.2.1(fixing issue #105)

  Show description for 8410428
  ipruteanu-sie

  committed
  8410428

• Merge pull request #107 from dderemiah/timesyncd_fix

  Show description for e8b3d85
  uk-bolly

  authored
  e8b3d85

• Merge pull request #111 from siemens/siemens/feat/r1_1_2_{2,3,4}_Removing_var_for_r1_1_2_1_from_when

  Show description for 137d500
  uk-bolly

  authored
  137d500

• Merge pull request #110 from ansible-lockdown/2023_September_Updates

  Show description for f36122a
  frederickw082922

  authored
  f36122a

Commits on Sep 28, 2023

• Merge pull request #109 from siemens/siemens/feat/r2_2_2_fixing_conditional

  Show description for 0e1ab4f
  uk-bolly

  authored
  0e1ab4f

• Fixing precondition for rule 1.1.1.2

  Show description for a667fb2
  bgro

  committed
  a667fb2

• Skipping uninstall if modul is built in.

  Show description for 5abdea6
  bgro

  committed
  5abdea6

• Added when clause for prelim tasks that are only relevant for control 1.1.1.2

  Show description for d27516b
  bgro

  committed
  d27516b

• Merge pull request #113 from siemens/siemens/feat/precondition_in_rule_1_1_1_2

  Show description for 8713b3f
  uk-bolly

  authored
  8713b3f

• Changing value in defaults/main.yml: Replaced '/etc/default/grub.cfg' WITH '/boot/grub/grub.cfg'

  Show description for 4041916
  ipruteanu-sie

  committed
  4041916

• fixes cron and mail.warn rsyslog entry

  Show description for 9dc8263
  dderemiah

  committed
  9dc8263

Commits on Sep 29, 2023

• Fixing name of gmd3 config file in Control 1.8.3.

  Show description for 2969f7f
  bgro

  committed
  2969f7f

• Merge pull request #116 from siemens/siemens/feat/R1_4_2_adjusting_grub_cfg_filepath_value

  Show description for facb35d
  uk-bolly

  authored
  facb35d

• Merge pull request #119 from siemens/siemens/feat/gdm_config_file

  Show description for 14a825e
  uk-bolly

  authored
  14a825e

• Changing 3.2.2 conditional

  Show description for 20fa079
  ipruteanu-sie

  committed
  20fa079

• Merge pull request #118 from dderemiah/4_2_2_5_typofix

  Show description for a902c1d
  uk-bolly

  authored
  a902c1d

• Allow multi-line banners

  Show description for d026551
  tomi-bigpi

  authored
  d026551

Commits on Oct 2, 2023

• [pre-commit.ci] pre-commit autoupdate

  Show description for 45d4f56
  pre-commit-ci[bot]

  authored
  45d4f56

Commits on Oct 3, 2023

• Merge pull request #101 from ansible-lockdown/pre-commit-ci-update-config

  Show description for 143a583
  uk-bolly

  authored
  143a583

• Merge pull request #122 from siemens/siemens/feat/R3_2_2_adjusting_conditional

  Show description for 9f524be
  uk-bolly

  authored
  9f524be

Commits on Oct 5, 2023

• Fixes #127.

  Show description for e3745ee
  bgro

  committed
  e3745ee

• updated to get from git since galaxy changes

  Show description for 82af308
  uk-bolly

  committed
  82af308

• Merge pull request #130 from ansible-lockdown/collections

  Show description for c286c26
  uk-bolly

  authored
  c286c26

Commits on Oct 6, 2023

• Merge branch 'ansible-lockdown:devel' into siemens/feat/squashfs_check_hangs

  bgro

  authored
  17cdac9

• Merge pull request #131 from siemens/siemens/feat/squashfs_check_hangs

  Show description for eed742b
  uk-bolly

  authored
  eed742b

Commits on Oct 9, 2023

• removed quality badge since galaxy-ng

  Show description for c674e87
  uk-bolly

  committed
  c674e87

• extended the PR #128 thanks to @dderemiah

  Show description for 4a95562
  uk-bolly

  committed
  4a95562

• issue #121 thanks to @ipruteanu-sie

  Show description for c0a7371
  uk-bolly

  committed
  c0a7371

• updated

  Show description for 15e53a3
  uk-bolly

  committed
  15e53a3

• [pre-commit.ci] pre-commit autoupdate

  Show description for f3fb86e
  pre-commit-ci[bot]

  authored
  f3fb86e

Commits on Oct 10, 2023

• issue #120 addressed for disabled root user

  Show description for ab40f4b
  uk-bolly

  committed
  ab40f4b

• updated

  Show description for c9188c7
  uk-bolly

  committed
  c9188c7

• updated versions

  Show description for 692ee9f
  uk-bolly

  committed
  692ee9f

• issue #124 addressed

  Show description for 14c8b0c
  uk-bolly

  committed
  14c8b0c

Commits on Oct 12, 2023

• Merge pull request #134 from ansible-lockdown/issues_and_collections

  Show description for 970e649
  uk-bolly

  authored
  970e649

Commits on Oct 13, 2023

• set changing password to default false

  Show description for 730f35d
  uk-bolly

  committed
  730f35d

• reorder section to stop pam blocking access

  Show description for 5b4c621
  uk-bolly

  committed
  5b4c621

• improved test

  Show description for d87c223
  uk-bolly

  committed
  d87c223

• made ssh_user allow blank again

  Show description for a1eee0c
  uk-bolly

  committed
  a1eee0c

• update to use pam module

  Show description for d7429d5
  uk-bolly

  committed
  d7429d5

Commits on Oct 16, 2023

• Updated raised @jubjeep on discord auditd still running

  Show description for 519cf59
  uk-bolly

  committed
  519cf59

• reorder pam for common-auth

  Show description for 0a6f3ed
  uk-bolly

  committed
  0a6f3ed

• updated logic 4.1.4.5

  Show description for 85ebe6b
  uk-bolly

  committed
  85ebe6b

• rewrite of rule_5.4.2

  Show description for 1a46ec1
  uk-bolly

  committed
  1a46ec1

• Added variables and explanation for 5.4.2

  Show description for 2db4010
  uk-bolly

  committed
  2db4010

• git audit logic thanks to @paulquevedojdrf #136

  Show description for 161e9ca
  uk-bolly

  committed
  161e9ca

• #135 thanks to @paulquevedojdrf

  Show description for c6c1e4f
  uk-bolly

  committed
  c6c1e4f

• added documentation option correctly

  Show description for ac42652
  uk-bolly

  committed
  ac42652

• updated for documentation

  Show description for 3cdb023
  uk-bolly

  committed
  3cdb023

• updated

  Show description for de4fb43
  uk-bolly

  committed
  de4fb43

• updated

  Show description for 86b6f46
  uk-bolly

  committed
  86b6f46

Commits on Oct 17, 2023

• Issue #138 purge packages when removed

  Show description for 03b2c38
  uk-bolly

  committed
  03b2c38

• issue #140 thanks to @zac90

  Show description for 9c0f55f
  uk-bolly

  committed
  9c0f55f

• issue #141 thanks to @zac90

  Show description for 7c8c2e1
  uk-bolly

  committed
  7c8c2e1

• issue #142 thanks to @zac90

  Show description for eb5e0bc
  uk-bolly

  committed
  eb5e0bc

• updated

  Show description for 798575f
  uk-bolly

  committed
  798575f

• updated as per @loz on discord

  Show description for 3e1c8f5
  uk-bolly

  committed
  3e1c8f5

• changed aide init to variables

  Show description for 073738a
  uk-bolly

  committed
  073738a

• fix typo

  Show description for 8fd3134
  uk-bolly

  committed
  8fd3134

• update conditional

  Show description for 7011362
  uk-bolly

  committed
  7011362

• imporved logic 4.1.4.1 & 4.1.4.5

  Show description for 279b313
  uk-bolly

  committed
  279b313

• 1.1.1.2 conditional logic

  Show description for 8ac0e42
  uk-bolly

  committed
  8ac0e42

• revert changed for 1.1.1.2

  Show description for 675f6a2
  uk-bolly

  committed
  675f6a2

Commits on Oct 18, 2023

• issue #143 added purge for 3.5.3.1.2

  Show description for 6bf52a3
  uk-bolly

  committed
  6bf52a3

• added hidden file check for logfiles

  Show description for ebe61e5
  uk-bolly

  committed
  ebe61e5

• Added sysctl file option for kernel changes

  Show description for 0ab75b6
  uk-bolly

  committed
  0ab75b6

• fixed control 1.7.1

  Show description for 0dffcce
  uk-bolly

  committed
  0dffcce

• Added sysctl_file option

  Show description for e81396f
  uk-bolly

  committed
  e81396f

Commits on Oct 19, 2023

• changed sshd_cipher/mac/kex logic

  Show description for f335da9
  uk-bolly

  committed
  f335da9

• fix typo in kex jinja

  Show description for 250defb
  uk-bolly

  committed
  250defb

• fix 5.2.14

  Show description for 61e50eb
  uk-bolly

  committed
  61e50eb

• updated

  Show description for f2aa941
  uk-bolly

  committed
  f2aa941

• issue #145 - 5.4.3 improvement

  Show description for eded340
  uk-bolly

  committed
  eded340

• corrected levels

  Show description for 13186fc
  uk-bolly

  committed
  13186fc

• corrected levels

  Show description for 35674d4
  uk-bolly

  committed
  35674d4

Commits on Oct 20, 2023

• updated rsync as noted by @DanAtWRS om community

  Show description for 79778cc
  uk-bolly

  committed
  79778cc

• Merge pull request #133 from ansible-lockdown/pre-commit-ci-update-config

  Show description for 76864d2
  uk-bolly

  authored
  76864d2

• issue #132 incorporated

  Show description for 3551a46
  uk-bolly

  committed
  3551a46

• updated

  Show description for 6e9b290
  uk-bolly

  committed
  6e9b290

• Enabling the user to chose between complain and enforce mode in 1.6.1.3.

  Show description for 3d7fd4e
  bgro

  committed
  3d7fd4e

• This commit looks more messy than it is, because it changes the order of rules 1.6.1.4 and 1.6.1.3 in the task file. This is necessary because the two rules set the same value, but if both rules ar…

  Show description for 0d237dc
  bgro

  committed
  0d237dc

• Improving documentation and fixing variables for GOSS.

  Show description for ad3f93d
  bgro

  committed
  ad3f93d

• Making sure that the audit role gets all expected variables (though this could be removed once the audit role is updated.

  Show description for 5d2c21b
  bgro

  committed
  5d2c21b

• 🚨 Fixing linter issues.

  Show description for 3ca4f16
  bgro

  committed
  3ca4f16

• 🚨 Fixing end-of-file.

  Show description for 4b11794
  bgro

  committed
  4b11794

Commits on Oct 23, 2023

• Merge pull request #148 from siemens/siemens/feat/rule_1_6_1_3_enforce_vs_complain_bis

  Show description for 9deb3cc
  uk-bolly

  authored
  9deb3cc

• Merge pull request #123 from tomi-bigpi/patch-1

  Show description for 625c74d
  uk-bolly

  authored
  625c74d

• issue #151 addes

  Show description for c79b926
  uk-bolly

  committed
  c79b926

• issue #153 addressed

  Show description for 2bb1bd0
  uk-bolly

  committed
  2bb1bd0

• updated thanks to @loz on discord

  Show description for c2c8435
  uk-bolly

  committed
  c2c8435

• added fix by @tomi-bigpi

  Show description for 0715dee
  uk-bolly

  committed
  0715dee

• updated

  Show description for 303c9ee
  uk-bolly

  committed
  303c9ee

• updated

  Show description for 22febb5
  uk-bolly

  committed
  22febb5

• [pre-commit.ci] pre-commit autoupdate

  Show description for e5c8160
  pre-commit-ci[bot]

  authored
  e5c8160

Commits on Oct 24, 2023

• updated 1.7.1 in audit options

  Show description for b6cb49d
  uk-bolly

  committed
  b6cb49d

• tidy up purge packages thanks @zac90

  Show description for 067cfa8
  uk-bolly

  committed
  067cfa8

• 3.5.1.4 ipv6 only valid when ipv6

  Show description for f08ca32
  uk-bolly

  committed
  f08ca32

• use variable for apt purge

  Show description for 5d7adea
  uk-bolly

  committed
  5d7adea

• tidy up of variable usage apt purge

  Show description for 6330881
  uk-bolly

  committed
  6330881

• lint

  Show description for 0414f7a
  uk-bolly

  committed
  0414f7a

Commits on Oct 25, 2023

• Merge pull request #155 from ansible-lockdown/pre-commit-ci-update-config

  Show description for 9d67801
  uk-bolly

  authored
  9d67801

• Merge pull request #137 from ansible-lockdown/community_work_fix

  Show description for b2e66fb
  uk-bolly

  authored
  b2e66fb

• fixes cron typo in rsyslog.conf generation

  Show description for d6f6a95
  dderemiah

  committed
  d6f6a95

Commits on Oct 26, 2023

• if timesyncd is not installed 2.1.1.1 errors

  Show description for 7915fc7
  dderemiah

  committed
  7915fc7

Commits on Oct 30, 2023

• Merge pull request #150 from dderemiah/fix_2.1.1.1

  Show description for 4380a30
  uk-bolly

  authored
  4380a30

• Merge pull request #149 from dderemiah/typo_4.2.2.x

  Show description for aacf253
  uk-bolly

  authored
  aacf253

Commits on Oct 31, 2023

• updated actions

  Show description for 24bb0ef
  uk-bolly

  committed
  24bb0ef

• updated to use sleep variable

  Show description for 8754cbd
  uk-bolly

  committed
  8754cbd

• Merge pull request #159 from ansible-lockdown/workflow_galaxy

  Show description for 143b047
  uk-bolly

  authored
  143b047

• update wording and typos

  Show description for 4defb13
  uk-bolly

  committed
  4defb13

Commits on Nov 2, 2023

• updated typo

  Show description for 08f40e2
  uk-bolly

  committed
  08f40e2

• tidy up precommit

  Show description for 5d018fc
  uk-bolly

  committed
  5d018fc

Commits on Nov 6, 2023

• fix: #161 NTP should be a space-separated list of NTP server host names or IP addresses, instead of a json encoded list or objects. Also added the section label [Time] to fix the log message "/etc/…

  Show description for 7fe1318
  Jason-Hendry

  committed
  7fe1318

• [pre-commit.ci] pre-commit autoupdate

  Show description for 05b4a9e
  pre-commit-ci[bot]

  authored
  05b4a9e

Commits on Nov 9, 2023

• Merge pull request #164 from ansible-lockdown/pre-commit-ci-update-config

  Show description for ad55112
  uk-bolly

  authored
  ad55112

• Merge pull request #162 from Jason-Hendry/fix/timesyncd-conf

  Show description for 504b7f1
  uk-bolly

  authored
  504b7f1

• Merge pull request #160 from ansible-lockdown/workflow_typo_updates

  Show description for 6181429
  uk-bolly

  authored
  6181429