ansible-collection-hardening/roles
Claudius Heine 384c097f8a
feat(os_hardening): extend file permission tasks to cover more files (#489)
The tasks `Change shadow ownership to root and mode to 0600` and `Change
passwd ownership to root and mode to 0644` only handle
`/etc/shadow` and `/etc/passwd` respectively. But there multiple
adjacent files that should be handled with these rules as well:

- `/etc/gshadow`
- `/etc/shadow-`
- `/etc/gshadow-`
- `/etc/group`
- `/etc/shadow-`
- `/etc/group-`

This change adds those files to the rules, so that permissions are
handled in the same way.

Closes: #488

Signed-off-by: Claudius Heine <ch@denx.de>
2021-10-21 09:51:20 +02:00
..
apache_hardening@41bd7d7e9d move to collections 2020-11-07 21:19:43 +01:00
mysql_hardening Prettified Code! 2021-08-25 10:58:16 +00:00
nginx_hardening Uppercased first letter of task names. (#422) 2021-03-25 13:52:56 +01:00
os_hardening feat(os_hardening): extend file permission tasks to cover more files (#489) 2021-10-21 09:51:20 +02:00
ssh_hardening fix filter error in ansible.builtin.file mode parameter (#486) 2021-10-18 20:55:24 +02:00
windows_hardening@41e8a1893c move to collections 2020-11-07 21:19:43 +01:00