Tags: mitre/ansible-rhel7-stig-hardening
Tags
Merge in documentation generation stuff (ansible-lockdown#201) * initial commit of working docs * slight Makefile change * remove lxml requirement and exlude build dir from git * major updates to docs builder, layout, etc * update deployer notes and content * further customization and content updates * further documentation cleanup and re-org * add in task and var parsing * some minor tweaks * key error fixup * EOL * test out rtd theme instead of alabaster * clean up auto_ files as well * make metadata templates and notes generic for sharing builder across roles * make the sphinx ext more generic and put config in conf.py * some clean up in the docs * we need sphinx>1.8 in the RTD builder * make sure our statuses stay ordered * need to use ordereddict in conf.py * one more attempt to get RTD to sort controls properly * something with RTD build process doesnt like sorting this way, try with a list * add link to not implemented status * add tag parsing and output to controls * update documentation with some placeholders * add a test build for docs to CI * make the logo black * minor updates to make Apache license match exactly { -> [ and a newline
STIG v1r2 updates (ansible-lockdown#37) * remove RHEL-07-030790 per V1R2 STIG release * removed comment about typo in STIG RHEL-07-040330 as it has been correct * updated RHEL-07-020100 task to reflect changes in V1R2 to use blacklist.conf and blacklist usb-storage * added capability to specify the boot superuser name * update README to V1R2
merge ssh and travis fixes from devel (ansible-lockdown#36) * Validate command must use absolute path (ansible-lockdown#32) * Validate command must use absolute path This is a fix for ansible-lockdown#31 * update cat2 validate tasks to use absolute path * fix for missing host keys * force pip to upgrade passlib * Adjust ssh tags to match global format (ansible-lockdown#35) * Update fix-cat2.yml * Update fix-cat1.yml
Merge pull request ansible-lockdown#30 from samdoran/master Update stable master
Firewall Service - Ability to have iptables (ansible-lockdown#20) * Add firewall service variable to readme * Add firewall service variable to defaults * have tasks use variable * Name the tag as firewall
Updates to the STIG role (ansible-lockdown#16) * get rid of .retry files in ansible.cfg and update test.yml playbook to correct path * ignore vagrant files * add some override variables to vars/main.yml * add vars for each STIG check, remove audit task vars, and update several others * update sshd handler name to reflect service name * move version checks to use assert instead of fail * comment out audit task files while we work to remove unnessecary audit tasks * move needed audit/register tasks into prelim.yml file and include it in main.yml * update STIG ID numbering to V1R1, add conditionals so we can enable/disable each STIG task, and add notimplemented tag to command: "true" tasks * CAT II: update STIG ID numbering to V1R1, add conditionals so we can enable/disable each STIG task, and add notimplemented tag to command: "true" tasks * CAT I: update STIG ID numbering to V1R1, add conditionals so we can enable/disable each STIG task, and add notimplemented tag to command: "true" tasks * update defaults * add service variables and update aide cron settings * cat1, cat2, cat3 tasks are working * move prelim tasks into cat1 file and use blocks to group related tasks * fixup some cat2 tasks and minor updates to make it work on centos