Mirrors/ansible-collection-hardening
2
0
Fork 0
mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-11-10 09:14:18 +00:00
Code Issues Projects Releases Packages Wiki Activity
ansible-collection-hardening/CHANGELOG.md
dev-sec CI 0ce08455ef update changelog
2021-05-05 19:08:21 +00:00

82 KiB
Raw Blame History

Changelog

7.7.0 (2021-05-05)

Full Changelog

Implemented enhancements:

Fixed bugs:

Closed issues:

  • No dependency on ansible.posix collection #414
  • No dependency on community.general #413
  • in lxc/docker/openvz IPv6 is always disabled by ufw-configuration #402
  • Allow login_unix_socket to be specified #327

Merged pull requests:

7.6.0 (2021-04-27)

Full Changelog

Implemented enhancements:

Fixed bugs:

Closed issues:

  • Support HostKeyAlgorithms configuration for ssh_client file #441

Merged pull requests:

7.5.0 (2021-04-01)

Full Changelog

Implemented enhancements:

Fixed bugs:

Closed issues:

  • Harden user home directories #276

Merged pull requests:

7.4.0 (2021-03-23)

Full Changelog

Implemented enhancements:

Closed issues:

  • Errors in packer build for vagrant builder #244

Merged pull requests:

7.3.0 (2021-03-16)

Full Changelog

Implemented enhancements:

Fixed bugs:

Closed issues:

  • Netdata monitoring of docker in docker no longer possible #412
  • Unable to connect with SSH (Permission denied (publickey)) #411
  • TASK [os_hardening : configure auditd | package-08] #410
  • Collection throws undefined ansible_role_name error in auditd task #409
  • Ensure permissions on /etc/crontab are configured #375 [minor] [os_hardening]
  • Documentation should be updated #361

Merged pull requests:

7.2.0 (2021-02-10)

Full Changelog

Implemented enhancements:

Fixed bugs:

  • A reason why instance would go in rescue mode ? #267 [bug]
  • fix galaxy action to update local galaxy.yml #395 [bug] [patch] (Normo)

Closed issues:

  • Updating version in galaxy.yml should be part of the release process #396
  • ssh_hardening fail on keypair generation #388
  • The system must display the date and time of the last successful account logon upon an SSH logon. #362
  • Error in "root password is present" step #326

Merged pull requests:

7.1.1 (2021-02-05)

Full Changelog

Fixed bugs:

Closed issues:

  • AnsibleUndefinedVariable: 'ansible_role_name' is undefined with 7.1.0 #387

7.1.0 (2021-02-02)

Full Changelog

Implemented enhancements:

Fixed bugs:

Closed issues:

  • initramfs-tools modules.j2 does not seem to be able to detect AMD CPUs #373
  • How do i install this on Centos 8? #367
  • hidepid=2 gives error when running systemctl on EL7 #364 [os_hardening] [patch]
  • Allow putting the ssh/sshd config in alternative files #348
  • os_env_umask has no effect #344
  • Don't modify /etc/sysctl.conf #343 [os_hardening]

Merged pull requests:

7.0.0 (2020-11-11)

Full Changelog

Breaking changes:

Implemented enhancements:

Fixed bugs:

  • Task "set 10.hardcore.conf perms to 0400 and root ownership" fails in check mode #313 [bug] [patch]
  • Inconsistent use of role vars/role defaults #284 [bug]
  • Is it safe to use on Debian 10? The build is failing. #281 [bug]
  • /etc/login.defs alters centos 7/8 default values #265 [bug] [help wanted]
  • Invalid Conditionals in user_accounts.yml #255 [bug]
  • auth-system related files are created for non-RHEL systems e.g. Debian #247 [bug]
  • NSA website links are stale #227 [bug] [hacktoberfest] [help wanted]
  • Running ansible on python3 throughs "TypeError: '<=' not supported between instances of 'str' and 'int'" #223 [bug]
  • lots of
  • squash_actions deprecation warning #218 [bug] [help wanted]
  • login.defs.j2 template: ENV_PATH is missing ':' before variable substitution #202 [bug]
  • auditd causing v5.0 to fail on unpriviledged LXC's #191 [bug]
  • Setting os_security_users_allow has no effect #175 [bug]
  • minimize_access: maximum recursion depth exceeded on Ansible 2.5 #171 [bug]
  • wrong permissions passwdqc #170 [bug]
  • 'sysctl_rhel_config' is undefined #167 [bug]
  • Update deprecated include statements #166 [bug]
  • Strongly recommend against disabling vfat by default #162 [bug]
  • bug in ufw.j2 template #151 [bug]
  • Add a "don't fail on error" switch ? #148 [bug]
  • System completely unresponsive after role execution #145 [bug]
  • Why is rsync removed? #141 [bug]
  • RHEL 7.4: Too many setuid bits removed #140 [bug] [help wanted]
  • Change system accounts not on the user provided ignore-list items are not JSON serializable #125 [bug]
  • playbook makes OS undetectable #124 [bug]
  • Centos7/RHEL7: Exec shield is enabled by default and not manageable anymore by sysctl.conf #118 [bug]
  • Could not find gem 'ruby (>= 2.1.0)' #116 [bug]
  • os_security_kernel_enable_sysrq is not implemented #115 [bug]
  • The task sysctl fails when /etc/initramfs-tools is not present #111 [bug]
  • The role fails when conditionally included #105 [bug]
  • Deprecation warning always_run #103 [bug]
  • CentOS 7 selinux dependencies #102 [bug]
  • ubuntu xenial warning during activate gpg-check for yum-repos #99 [bug]
  • rhel_system_auth.j2 is still using pam_passwdqc.so for CentOS 7 #98 [bug]
  • Centos 7.1 fails at [Change various sysctl-settings on rhel-hosts...] #74 [bug]
  • Enable pam_pwquality in rhel-family > 7 #73 [bug] [help wanted]
  • Hardening fails on Centos 7.1 at task 'minimize access' #71 [bug] [help wanted]
  • "irc" user always changed after reboot #53 [bug] [help wanted]
  • use touch for 10.hardcore.conf to avoid problems with dry-run #314 [bug] [patch] (schurzi)
  • use touch with no date changes #310 [bug] [patch] (rndmh3ro)
  • do not touch sysctl file to avoid idempotency problems #309 [bug] [patch] (rndmh3ro)
  • replace module parameter fixed #297 [bug] [patch] (danielkubat)
  • Addressing issue #255 #258 [bug] (ljkimmel)
  • Fix #247, cleanup conditions #248 [bug] (fernandezcuesta)
  • Fix error on applying the sysctl vars on containers #243 [bug] (ghost)
  • Update location of NSA RHEL 5 Guide #235 [bug] (jaredledvina)
  • Fix typo #212 [bug] (ruslo)
  • Update modprobe to 0644 #211 [bug] (joshuatalb)
  • Test Kitchen Vagrant Fixes #210 [bug] (joshuatalb)
  • readme
  • fix ansible lint remarks #204 [bug] (rndmh3ro)
  • add colon to user env paths - fix #202 #203 [bug] (rndmh3ro)
  • add /usr/bin/su to suid_guid whitelist #199 [bug] (ccolic)
  • ensure that permissions to su-binary are not restricted to root user and group only, if os_security_users_allow contains the value change_user #197 [bug] (szEvEz)
  • do not install passwdqc on amazon linux #189 [bug] (rndmh3ro)
  • add back run opts for debian 8 in travis #184 [bug] (rndmh3ro)
  • Fix core dump config file creation when core dumps are disabled #182 [bug] (Normo)
  • change minimize access method #181 [bug] (rndmh3ro)
  • Fix errors produced by ansible-lint #159 [bug] (zbrojny120)
  • replace single ticks with double ticks. fix #151 #152 [bug] (rndmh3ro)
  • fixed tag #149 [bug] (martinbydefault)
  • Remove rsync from package blacklist #142 [bug] (duk3luk3)
  • Updates "tags" parameters on includes in main.yml #66 [bug] (conorsch)
  • Suid set def var, fix #64 #63 [bug] (rndmh3ro)

Closed issues:

  • Any planned support for RHEL/CentOS 8? #298
  • Consider using find module instead of shell #293
  • Optimize logical OR in when clause #292
  • vfat added to dev-sec.conf, but efi is used #288
  • The state of the galaxy release #269
  • OpenSUSE Support #249
  • ansible hardening fails on ubuntu 16.04 with msg": "ERROR! 'sysctl_rhel_config' is undefined #147
  • Enhancement: Test with TestInfra and Molecule #128
  • Enhancement: Pin python dependencies for development and testing #127
  • Update readme to include baselines #122
  • Error running on RHEL 7 due to syntax issues #112
  • disable password age #109
  • Permissions on /etc/shadow can lock out GUI users #86
  • network related sysctl rewritten by ufw in ubuntu #82
  • ansible >= 2.0 complains: Using bare variables is deprecated #78
  • Hardening fails on Centos 7.1 at task 'remove suid/sgid bit from all binaries except in system and user whitelist' #72
  • ansible 2.0 | "remove suid/sgid" task fails #64
  • Custom sysctl #50
  • Fix directory structure. #48
  • pam auth update error #47
  • ansible-os-hardening/tasks/minimize_access.yml #38
  • Role configuration. vars/main.yml? #34
  • Sysctl reloading #18
  • Add conditions for disabling of ip forwarding #15
  • Disable System Accounts #6

Merged pull requests:

* This Changelog was automatically generated by github_changelog_generator