Mirrors/ansible-collection-hardening

mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-09-20 21:21:54 +00:00

dev-sec CI eeedaeaffb update changelog

2021-03-11 16:46:51 +00:00

13 KiB

Raw Blame History

Changelog

7.3.0 (2021-03-11)

Implemented enhancements:

Extend GSSAPI configuration support to ssh_config #403 (wzzrd)
add restart handler variable for mysql role #399 (rndmh3ro)

Closed issues:

Unable to connect with SSH (Permission denied (publickey)) #411
TASK [os_hardening : configure auditd | package-08] #410
Collection throws undefined ansible_role_name error in auditd task #409
Ensure permissions on /etc/crontab are configured #375
Documentation should be updated #361

Merged pull requests:

Ensure permissions on /etc/crontab are configured #405 (joubbi)
remove FQCN from roles in examples #404 (schurzi)
do not install mysql python package on target host #401 (rndmh3ro)
make wrong password fail task #400 (rndmh3ro)

7.2.0 (2021-02-10)

Implemented enhancements:

Add variable to specify SSH host RSA key size #394 (Normo)
Set default for ssh host key files only when hardening the server #393 (Normo)

Fixed bugs:

A reason why instance would go in rescue mode ? #267
fix galaxy action to update local galaxy.yml #395 (Normo)

Closed issues:

Updating version in galaxy.yml should be part of the release process #396
ssh_hardening fail on keypair generation #388
The system must display the date and time of the last successful account logon upon an SSH logon. #362
Error in "root password is present" step #326

Merged pull requests:

fix minimum required ansible version in docs #390 (schurzi)

7.1.1 (2021-02-05)

Fixed bugs:

use fqcn for community.crypto.openssh_keypair module #389 (schurzi)

Closed issues:

AnsibleUndefinedVariable: 'ansible_role_name' is undefined with 7.1.0 #387

7.1.0 (2021-02-02)

Implemented enhancements:

Default value for ssh_max_startups should be changed #366
Comment in configuration files should state which collection was there #345
Error on applying the sysctl vars on Debian Jessy #230
add Support for OpenSSH HostCertificate config option #380 (mpraeger)
Syncookie #372 (joubbi)
Sorted sysctl values and lists in READMEs alphabetically No functional changes. #371 (joubbi)
make auditd 'max_log_file' configurable #370 (tgueldner-mms)
reduce maximum unauthenticated ssh sessions #368 (schurzi)
add a runtime.yml to declare minimum ansible version #363 (rndmh3ro)
change inclusion of os specific defaults #353 (schurzi)
make the os_env_umask variable usable #351 (sprat)
Fix #348: make ssh configuration files paths configurable #350 (sprat)
Removed Protocol statement in later versions of sshd, since the code … #342 (joubbi)
Improvements of comments in opensshd.conf.j2 #338 #339 (joubbi)

Fixed bugs:

Comments in opensshd.conf.j2 should be improved #338
check for correct cpu vendor in initramfs-tools #374 (schurzi)
set hidepid=0 on RHEL/CentOS 7 #369 (schurzi)

Closed issues:

initramfs-tools modules.j2 does not seem to be able to detect AMD CPUs #373
How do i install this on Centos 8? #367
hidepid=2 gives error when running systemctl on EL7 #364
Allow putting the ssh/sshd config in alternative files #348
os_env_umask has no effect #344
Don't modify /etc/sysctl.conf #343

Merged pull requests:

update ansible-lint to version 5 #397 (schurzi)
use version tag for changelog action #386 (schurzi)
make release workflow manually runnable #384 (schurzi)
run labeler workflow with higher privileges #383 (schurzi)
remove issue labels from changelog #382 (schurzi)
Added comment on top of templates about which role manages the file #378 (joubbi)
Regenerate RSA key with size 4096 bits #376 (ssttehrani)
fix second changelog generation task, too #349 (rndmh3ro)
fix changelog generation #341 (rndmh3ro)
Improve README for ssh_hardening #335 (szEvEz)

7.0.0 (2020-11-11)

Breaking changes:

Move all roles to one single collection #332 (rndmh3ro)

Implemented enhancements:

Breaking change in ansible-lint - set file permissions explicitly #299
Improve Documentation #315 (schurzi)
Arch support #303 (rndmh3ro)
fix linting for molecule #301 (schurzi)
file permissions explicitly defined #300 (danielkubat)
Optimize and unify when clause #295 (Alexhha)
use find module instead of shell #294 (danielkubat)
improve testing #287 (schurzi)
Mount proc filesystem using hidepid option #283 (alegrey91)
unify changelog and release actions #279 (rndmh3ro)
purge insecure packages #275 (chris-rock)
add changelog and release workflow #271 (rndmh3ro)

Fixed bugs:

Task "set 10.hardcore.conf perms to 0400 and root ownership" fails in check mode #313
use touch for 10.hardcore.conf to avoid problems with dry-run #314 (schurzi)
use touch with no date changes #310 (rndmh3ro)
do not touch sysctl file to avoid idempotency problems #309 (rndmh3ro)
replace module parameter fixed #297 (danielkubat)

Closed issues:

Any planned support for RHEL/CentOS 8? #298

Merged pull requests:

prettier markdown files action added #322 (danielkubat)
adjust permissions on shadow file on suse #311 (rndmh3ro)
fix fedora build #296 (rndmh3ro)
do not blacklist used filesystems #289 (schurzi)
move hidepid vars into defaults so theyre overwritable #285 (rndmh3ro)
install procps in debian so sysctl.conf exists #282 (rndmh3ro)

* This Changelog was automatically generated by github_changelog_generator