Commit graph

152 commits

Author SHA1 Message Date
Martin Schurz
1825eba27a exclude opensuse
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-10 21:08:50 +02:00
Martin Schurz
fa7f8597d9 fix bug in check for /boot
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-10 13:36:19 +02:00
Martin Schurz
b6b2d45f09 speedup ansible
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 15:43:59 +02:00
Martin Schurz
9cfe1f2b9a also harden /boot
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 15:43:11 +02:00
Martin Schurz
e49eacd8ec icrease ressources for test vm
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 10:42:20 +02:00
Martin Schurz
7535abd882 remove waiver
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 02:22:35 +02:00
Martin Schurz
400e576984 use correct parameter
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 01:47:59 +02:00
Martin Schurz
e742330a41 add testing of os_hardning on vm
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-09 00:52:58 +02:00
Martin Schurz
21df60a71f fix includes
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2022-07-08 17:24:07 +02:00
Sebastian Gumprich
bf372f8493 rename tasks file and remove redundant 'verify'
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2022-07-08 16:04:24 +02:00
Sebastian Gumprich
ef89d52f98 remove duplicate file
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2022-07-07 16:22:10 +02:00
Sebastian Gumprich
9b50392d8a fix linting
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2022-07-07 16:12:06 +02:00
Sebastian Gumprich
215c50709b tempt 2022-07-07 15:34:28 +02:00
Sebastian Gumprich
af14af5954
add waivers to skip controls (#529)
Signed-off-by: rndmh3ro <github@gumpri.ch>
2022-02-21 13:58:39 +01:00
Sebastian Gumprich
8f22ce788c
Feature coredump (#513)
* restructure limits-tasks

* disable coredumps in tests

* use notify-task for systemd-reload

Signed-off-by: rndmh3ro <github@gumpri.ch>

* add notify to another task

Signed-off-by: rndmh3ro <github@gumpri.ch>

* rm obsolete task and rename handler

Signed-off-by: rndmh3ro <github@gumpri.ch>
2021-12-10 22:10:14 +01:00
René Scheibe
0609cf729a Improve installing packages on Arch Linux
This prevents annoying task errors (even though they are ignored)
when testing on non-Arch distributions.

Running the "prepare" command, this was always visible:
> fatal: [instance]: FAILED! => {"changed": false, "msg": "Failed to find required executable \"pacman\" in paths: /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin"}

Signed-off-by: René Scheibe <rene.scheibe@gmail.com>
2021-11-07 13:53:03 +01:00
René Scheibe
bbe4ce16a1
Add whitelist option for yum repository files (#487)
Files in this whitelist should not be altered.

Currently this is only relevant for enforcing the gpg check.

Signed-off-by: René Scheibe <rene.scheibe@gmail.com>
2021-11-07 11:56:59 +01:00
lbayerlein
1bf31a197b
disable ctrl-alt-del key combination (#496)
* new function to disable ctrl-alt-del to avooid reboot virtual machines f.e.

Signed-off-by: Ludwig Bayerlein <bayerlein@bayerlein-networks.com>

* fix variable documentation for ctrlaltdel

Signed-off-by: Ludwig Bayerlein <bayerlein@bayerlein-networks.com>

* added ctrlaltdel variable for molecule

Signed-off-by: Ludwig Bayerlein <bayerlein@bayerlein-networks.com>

* optimize ctrlaltdel function with a 'when' query. thanks to rndmh3ro

Signed-off-by: Ludwig Bayerlein <bayerlein@bayerlein-networks.com>

* fix typo in new file

Co-authored-by: Ludwig Bayerlein <bayerlein@bayerlein-networks.com>
Co-authored-by: Sebastian Gumprich <rndmh3ro@users.noreply.github.com>
2021-10-28 10:31:58 +02:00
schurzi
12c1f3dd78
Merge pull request #491 from dev-sec/recreate_tests
revive old tests with custom ssh settings
2021-10-25 11:12:10 +02:00
rndmh3ro
7f17f9b8b2 remove unused verify file
Signed-off-by: rndmh3ro <github@gumpri.ch>
2021-10-25 11:04:47 +02:00
rndmh3ro
f32b2c2c5e fix match address test 2021-10-20 15:18:01 +02:00
rndmh3ro
3877a9bab1 fix comment
Signed-off-by: rndmh3ro <github@gumpri.ch>
2021-10-18 22:00:01 +02:00
rndmh3ro
cb7f447d9f fix comment
Signed-off-by: rndmh3ro <github@gumpri.ch>
2021-10-18 21:55:01 +02:00
rndmh3ro
55c83ac92d use second molecule scenario for custom ssh tests
Signed-off-by: rndmh3ro <github@gumpri.ch>
2021-10-18 21:49:24 +02:00
rndmh3ro
bbc827e4a1 use second molecule scenario for custom ssh tests
Signed-off-by: rndmh3ro <github@gumpri.ch>
2021-10-18 21:33:45 +02:00
rndmh3ro
940819ab84 revive old tests with custom ssh settings
Signed-off-by: rndmh3ro <github@gumpri.ch>
2021-10-18 21:01:02 +02:00
Sina Tak Tehrani
5debcc0c6f
fix filter error in ansible.builtin.file mode parameter (#486)
* fix filter error in ansible.builtin.file mode parameter

* Change cinc supermarket

* fix link to baseline

* fix typo

Co-authored-by: Sebastian Gumprich <rndmh3ro@users.noreply.github.com>
2021-10-18 20:55:24 +02:00
rndmh3ro
92bd94a0cf change baseline urls to full zip-url
the other urls that use git don't work anymore

Signed-off-by: rndmh3ro <github@gumpri.ch>
2021-10-18 20:28:19 +02:00
rndmh3ro
6c80de270b remove molecule linting, because it has own action now
Signed-off-by: rndmh3ro <github@gumpri.ch>
2021-08-15 20:16:56 +02:00
Sebastian Gumprich
41cd8485cb
enable ipv6 globally (#450)
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2021-05-26 20:13:45 +02:00
Sebastian Gumprich
8c89d78f44 move jmespath installation into github workflow
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2021-04-01 21:16:04 +02:00
Sebastian Gumprich
5ed100b7ea try to install jmespath on github host
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2021-04-01 21:16:04 +02:00
Sebastian Gumprich
e1f0efb220 move mysql install to prepare step to create a password-less user
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2021-04-01 21:16:04 +02:00
Sebastian Gumprich
73cdd973d7 remove custom tests as we have inspec tests
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2021-04-01 21:16:04 +02:00
Sebastian Gumprich
c3b954a2ab add new tasks to delete users without passwords
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2021-04-01 21:16:04 +02:00
Sebastian Gumprich
2fb54bd224 remove secure-auth param if mysql => 8.0.3
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>

install collection in molecule

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>

remove deprecated ubuntu 16.04 from tests

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2021-04-01 13:20:58 +02:00
schurzi
2882a15ee1
Merge pull request #427 from dev-sec/snoopotic-fix/add_auditd_restart_handler
add restart-auditd handler after configuration change
2021-03-29 21:15:46 +02:00
Sebastian Gumprich
458dfa2b6a use cinc exec supermarket instead of github
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2021-03-29 16:16:03 +02:00
Sebastian Gumprich
6c805f6ca9 add support for using a proxy to test with molecule
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2021-03-19 15:52:19 +01:00
Sebastian Gumprich
8cb6732882 add support for using a proxy to test with molecule
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2021-03-19 15:45:06 +01:00
Martin Schurz
ec9d7d2cb8 cleanup and typos
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2021-03-15 23:39:12 +01:00
Martin Schurz
75fc31b80c remove cracklib
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2021-02-22 19:10:45 +01:00
Martin Schurz
10841ced62 case sensitive
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2021-02-22 18:29:55 +01:00
Martin Schurz
335df545fb correct version
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2021-02-22 18:15:33 +01:00
Martin Schurz
6d2c92d4ab correct locale
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2021-02-22 18:14:59 +01:00
Martin Schurz
3334000b97 set locale for test
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2021-02-22 17:45:46 +01:00
Martin Schurz
26d84b5f84 use custom /tmp dir
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2021-02-22 16:46:41 +01:00
Martin Schurz
9b6f313065 move pam tests up
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2021-02-22 15:54:03 +01:00
Martin Schurz
23071a183c add testcases for PAM
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
2021-02-22 15:42:13 +01:00
schurzi
a75e2c028b
change inclusion of os specific defaults (#353)
* change inclusion of os specific defaults

we now include the os specific options into a separate variable and
merge this with the default ansible namespace, when the corresponding
keys do not already exist (eg. are defined by default oder by user)

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* simplify check for os specific variables

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* add test for variable override

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* move tests to verify stage

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* correct grep

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* linting

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* fix typo

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* Revert "Merge pull request #351 from sprat/fix-umask"

This reverts commit 9e8e0bc8fb, reversing
changes made to 98c7553016.

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* move immutable ssh vars to internal vars

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* move vars to OS files

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* change default handling for all roles

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* fix issues

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* add documentation

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>

* Update main.yml

Co-authored-by: Sebastian Gumprich <rndmh3ro@users.noreply.github.com>
2020-12-20 20:46:57 +01:00
Sebastian Gumprich
98c7553016 remove trailing blank lines
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
2020-12-15 20:09:29 +01:00
Sebastian Gumprich
ac3c12d264 move to collections 2020-11-07 21:19:43 +01:00