ansible-collection-hardening/roles
divialth fb8b9142c8
rework filesystem hardening (#555)
* rework filesystem hardening

-  removed a lot duplicated code by using a loop
-  added new hardening options for /tmp
-  added new options "passno" and "dump" for every filesystem.
   currently ansible changed that values to 0 for every fs
   new default depends on fstype, can be overwriten in config
-  removed default fstype in config
   the type will now be autodetected,  can be overwriten in config
-  mount src setting is now optional
   the source will now be autodetected,  can be overwriten in config
-  it will be now checked, if it is really a mount
-  changed fs reload to handler
-  removed check os_auditd_enabled on /var/log/audit

Signed-off-by: divialth <65872926+divialth@users.noreply.github.com>

* fix lint errors

Signed-off-by: divialth <65872926+divialth@users.noreply.github.com>

* implemented the name suggestions

Signed-off-by: divialth <65872926+divialth@users.noreply.github.com>

Signed-off-by: divialth <65872926+divialth@users.noreply.github.com>
2022-08-22 11:16:57 +02:00
..
apache_hardening@41bd7d7e9d move to collections 2020-11-07 21:19:43 +01:00
mysql_hardening add basic support for ubuntu22.04 (#554) 2022-08-15 13:05:09 +02:00
nginx_hardening Add full support for Debian 11 (#538) 2022-08-16 15:02:27 +02:00
os_hardening rework filesystem hardening (#555) 2022-08-22 11:16:57 +02:00
ssh_hardening change default to allow SFTP (#564) 2022-08-22 10:03:37 +02:00
windows_hardening@41e8a1893c move to collections 2020-11-07 21:19:43 +01:00