mirror of
https://github.com/dev-sec/ansible-collection-hardening
synced 2024-09-20 13:21:52 +00:00
15 KiB
15 KiB
Changelog
7.4.0 (2021-03-22)
Closed issues:
- Errors in packer build for vagrant builder #244
Merged pull requests:
- add support for using a proxy to test with molecule #429 (rndmh3ro)
- Improve Documentation for sysctl defaults #418 (joubbi)
7.3.0 (2021-03-16)
Implemented enhancements:
- pam_tally2 is deprecated in RHEL8 and pam_faillock should be used in EL7 and EL8 instead. #377
- Replace pam_tally2 with pam_faillock in Redhat #273
- Extend GSSAPI configuration support to ssh_config #403 (wzzrd)
- add restart handler variable for mysql role #399 (rndmh3ro)
- restructure PAM handling and update for currently supported Linux distributions #392 (schurzi)
Fixed bugs:
- Not able to use
sudocommand for user authenticated via ActiveDirectory #278 - You shouldn't touch /etc/pam.d/system-auth-ac in RedHat/CentOS #252
Closed issues:
- Netdata monitoring of docker in docker no longer possible #412
- Unable to connect with SSH (Permission denied (publickey)) #411
- TASK [os_hardening : configure auditd | package-08] #410
- Collection throws undefined ansible_role_name error in auditd task #409
- Ensure permissions on /etc/crontab are configured #375
- Documentation should be updated #361
Merged pull requests:
- Harden user home dirs #428 (rndmh3ro)
- Improve Release Action #421 (schurzi)
- remove FQCN from roles in examples #420 (schurzi)
- Ensure permissions on /etc/crontab are configured #405 (joubbi)
- remove FQCN from roles in examples #404 (schurzi)
- do not install mysql python package on target host #401 (rndmh3ro)
- make wrong password fail task #400 (rndmh3ro)
7.2.0 (2021-02-10)
Implemented enhancements:
- Add variable to specify SSH host RSA key size #394 (Normo)
- Set default for ssh host key files only when hardening the server #393 (Normo)
Fixed bugs:
- A reason why instance would go in rescue mode ? #267
- fix galaxy action to update local galaxy.yml #395 (Normo)
Closed issues:
- Updating version in galaxy.yml should be part of the release process #396
- ssh_hardening fail on keypair generation #388
- The system must display the date and time of the last successful account logon upon an SSH logon. #362
- Error in "root password is present" step #326
Merged pull requests:
- update ansible-lint to version 5 #397 (schurzi)
- fix minimum required ansible version in docs #390 (schurzi)
7.1.1 (2021-02-05)
Fixed bugs:
Closed issues:
- AnsibleUndefinedVariable: 'ansible_role_name' is undefined with 7.1.0 #387
7.1.0 (2021-02-02)
Implemented enhancements:
- Default value for ssh_max_startups should be changed #366
- Comment in configuration files should state which collection was there #345
- Error on applying the sysctl vars on Debian Jessy #230
- add Support for OpenSSH HostCertificate config option #380 (mpraeger)
- Syncookie #372 (joubbi)
- Sorted sysctl values and lists in READMEs alphabetically
No functional changes. #371 (joubbi) - make auditd 'max_log_file' configurable #370 (tgueldner-mms)
- reduce maximum unauthenticated ssh sessions #368 (schurzi)
- add a runtime.yml to declare minimum ansible version #363 (rndmh3ro)
- change inclusion of os specific defaults #353 (schurzi)
- make the os_env_umask variable usable #351 (sprat)
- Fix #348: make ssh configuration files paths configurable #350 (sprat)
- Removed Protocol statement in later versions of sshd, since the code … #342 (joubbi)
- Improvements of comments in opensshd.conf.j2 #338 #339 (joubbi)
Fixed bugs:
- Comments in opensshd.conf.j2 should be improved #338
- check for correct cpu vendor in initramfs-tools #374 (schurzi)
- set hidepid=0 on RHEL/CentOS 7 #369 (schurzi)
Closed issues:
- initramfs-tools modules.j2 does not seem to be able to detect AMD CPUs #373
- How do i install this on Centos 8? #367
- hidepid=2 gives error when running systemctl on EL7 #364
- Allow putting the ssh/sshd config in alternative files #348
- os_env_umask has no effect #344
- Don't modify /etc/sysctl.conf #343
Merged pull requests:
- use version tag for changelog action #386 (schurzi)
- make release workflow manually runnable #384 (schurzi)
- run labeler workflow with higher privileges #383 (schurzi)
- remove issue labels from changelog #382 (schurzi)
- Added comment on top of templates about which role manages the file #378 (joubbi)
- Regenerate RSA key with size 4096 bits #376 (ssttehrani)
- fix second changelog generation task, too #349 (rndmh3ro)
- fix changelog generation #341 (rndmh3ro)
- Improve README for ssh_hardening #335 (szEvEz)
7.0.0 (2020-11-11)
Breaking changes:
Implemented enhancements:
- Breaking change in ansible-lint - set file permissions explicitly #299
- Improve Documentation #315 (schurzi)
- Arch support #303 (rndmh3ro)
- fix linting for molecule #301 (schurzi)
- file permissions explicitly defined #300 (danielkubat)
- Optimize and unify when clause #295 (Alexhha)
- use find module instead of shell #294 (danielkubat)
- improve testing #287 (schurzi)
- Mount proc filesystem using hidepid option #283 (alegrey91)
- unify changelog and release actions #279 (rndmh3ro)
- purge insecure packages #275 (chris-rock)
- add changelog and release workflow #271 (rndmh3ro)
Fixed bugs:
- Task "set 10.hardcore.conf perms to 0400 and root ownership" fails in check mode #313
- use touch for 10.hardcore.conf to avoid problems with dry-run #314 (schurzi)
- use touch with no date changes #310 (rndmh3ro)
- do not touch sysctl file to avoid idempotency problems #309 (rndmh3ro)
- replace module parameter fixed #297 (danielkubat)
Closed issues:
- Any planned support for RHEL/CentOS 8? #298
Merged pull requests:
- prettier markdown files action added #322 (danielkubat)
- adjust permissions on shadow file on suse #311 (rndmh3ro)
- fix fedora build #296 (rndmh3ro)
- do not blacklist used filesystems #289 (schurzi)
- move hidepid vars into defaults so theyre overwritable #285 (rndmh3ro)
- install procps in debian so sysctl.conf exists #282 (rndmh3ro)
* This Changelog was automatically generated by github_changelog_generator