Mirrors/ansible-collection-hardening
2
0
Fork 0
mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-11-14 02:47:06 +00:00
Code Issues Projects Releases Packages Wiki Activity
ansible-collection-hardening/CHANGELOG.md
Sebastian Gumprich c95f41c8c1 update changelog
2018-11-04 21:47:52 +01:00

25 KiB
Raw Blame History

Change Log

5.1.0 (2018-10-17)

Full Changelog

Implemented enhancements:

Fixed bugs:

  • auditd causing v5.0 to fail on unpriviledged LXC's #191
  • Setting os_security_users_allow has no effect #175
  • add /usr/bin/su to suid_guid whitelist #199 (ccolic)
  • ensure that permissions to su-binary are not restricted to root user and group only, if os_security_users_allow contains the value change_user #197 (szEvEz)

5.0.0 (2018-09-02)

Full Changelog

Implemented enhancements:

Fixed bugs:

  • minimize_access: maximum recursion depth exceeded on Ansible 2.5 #171
  • wrong permissions passwdqc #170
  • Update deprecated include statements #166
  • Strongly recommend against disabling vfat by default #162
  • System completely unresponsive after role execution #145
  • do not install passwdqc on amazon linux #189 (rndmh3ro)
  • add back run opts for debian 8 in travis #184 (rndmh3ro)
  • Fix core dump config file creation when core dumps are disabled #182 (Normo)
  • change minimize access method #181 (rndmh3ro)

4.3.0 (2018-01-03)

Full Changelog

Implemented enhancements:

  • Update some RH settings in this role #155
  • Removal of core dump hardening configuration if core dumps are allowed #129
  • Don't create home for system accounts #156 (oakey-b1)
  • Prevent disabling of filesystems via whitelist #153 (manuelprinz)
  • Add kernel hardening settings from Ubuntu /etc/sysctl.d #150 (kravietz)
  • Removal of core dump hardening configuration if core dumps are allowed #146 (martinbydefault)
  • add missing sysctl parameter #143 (rndmh3ro)
  • update readme #139 (rndmh3ro)

Fixed bugs:

Closed issues:

  • ansible hardening fails on ubuntu 16.04 with msg": "ERROR! 'sysctl_rhel_config' is undefined #147
  • Enhancement: Test with TestInfra and Molecule #128

Merged pull requests:

4.3.1 (2017-09-13)

Full Changelog

Fixed bugs:

  • os_security_kernel_enable_sysrq is not implemented #115

4.2.0 (2017-08-08)

Full Changelog

Implemented enhancements:

Fixed bugs:

  • Why is rsync removed? #141
  • playbook makes OS undetectable #124
  • Centos7/RHEL7: Exec shield is enabled by default and not manageable anymore by sysctl.conf #118
  • Remove rsync from package blacklist #142 (duk3luk3)

Merged pull requests:

  • remove execshield sysctl-parameter on rhel7 #119 (rndmh3ro)

4.1.0 (2017-06-27)

Full Changelog

Fixed bugs:

  • Change system accounts not on the user provided ignore-list items are not JSON serializable #125
  • Could not find gem 'ruby (>= 2.1.0)' #116
  • The task sysctl fails when /etc/initramfs-tools is not present #111
  • Deprecation warning always_run #103

Closed issues:

  • Enhancement: Pin python dependencies for development and testing #127
  • Update readme to include baselines #122

Merged pull requests:

  • Converts set to JSON-serializable list #126 (pestaa)
  • add more sysctl settings, allow overwriting #120 (rndmh3ro)

4.0.0 (2017-03-14)

Full Changelog

Implemented enhancements:

  • Description of the Ansible roles of dev-sec says "This Ansible playbook" #97
  • install initramfs-tools #114 (rndmh3ro)
  • omit empty variables #106 (rndmh3ro)

Fixed bugs:

  • The role fails when conditionally included #105
  • omit empty variables #106 (rndmh3ro)

Closed issues:

  • Error running on RHEL 7 due to syntax issues #112
  • disable password age #109

Merged pull requests:

3.2.0 (2016-10-24)

Full Changelog

Fixed bugs:

  • CentOS 7 selinux dependencies #102
  • ubuntu xenial warning during activate gpg-check for yum-repos #99
  • rhel_system_auth.j2 is still using pam_passwdqc.so for CentOS 7 #98
  • Enable pam_pwquality in rhel-family > 7 #73
  • "irc" user always changed after reboot #53

Merged pull requests:

3.1.0 (2016-08-03)

Full Changelog

3.1 (2016-07-27)

Full Changelog

Implemented enhancements:

Fixed bugs:

  • Centos 7.1 fails at [Change various sysctl-settings on rhel-hosts...] #74
  • Hardening fails on Centos 7.1 at task 'minimize access' #71

Closed issues:

  • Permissions on /etc/shadow can lock out GUI users #86
  • network related sysctl rewritten by ufw in ubuntu #82
  • ansible >= 2.0 complains: Using bare variables is deprecated #78
  • Norm-Audit-Hardening-Audit #76

Merged pull requests:

  • Fix a formatting issue in readme. #92 (vivekagr)
  • Permits overriding permissions on /etc/shadow #89 (conorsch)

3.0.0 (2016-03-13)

Full Changelog

Implemented enhancements:

Fixed bugs:

  • Updates "tags" parameters on includes in main.yml #66 (conorsch)
  • Suid set def var, fix #64 #63 (rndmh3ro)
  • ERROR! Include tasks should not specify tags in more than one way #60 (fitz123)

Closed issues:

  • Hardening fails on Centos 7.1 at task 'remove suid/sgid bit from all binaries except in system and user whitelist' #72
  • ansible 2.0 | "remove suid/sgid" task fails #64
  • Custom sysctl #50

Merged pull requests:

2.0.0 (2015-11-28)

Full Changelog

Closed issues:

  • Fix directory structure. #48
  • pam auth update error #47

Merged pull requests:

1.0.0 (2015-09-01)

Closed issues:

  • ansible-os-hardening/tasks/minimize_access.yml #38
  • Role configuration. vars/main.yml? #34
  • Sysctl reloading #18
  • Add conditions for disabling of ip forwarding #15
  • Disable System Accounts #6

Merged pull requests:

* This Change Log was automatically generated by github_changelog_generator