Skip to content

Tags: mitre/ansible-rhel7-stig-hardening

Tags

0.2.0

Toggle 0.2.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Merge in documentation generation stuff (ansible-lockdown#201)

* initial commit of working docs

* slight Makefile change

* remove lxml requirement and exlude build dir from git

* major updates to docs builder, layout, etc

* update deployer notes and content

* further customization and content updates

* further documentation cleanup and re-org

* add in task and var parsing

* some minor tweaks

* key error fixup

* EOL

* test out rtd theme instead of alabaster

* clean up auto_ files as well

* make metadata templates and notes generic for sharing builder across roles

* make the sphinx ext more generic and put config in conf.py

* some clean up in the docs

* we need sphinx>1.8 in the RTD builder

* make sure our statuses stay ordered

* need to use ordereddict in conf.py

* one more attempt to get RTD to sort controls properly

* something with RTD build process doesnt like sorting this way, try with a list

* add link to not implemented status

* add tag parsing and output to controls

* update documentation with some placeholders

* add a test build for docs to CI

* make the logo black

* minor updates to make Apache license match exactly { -> [ and a newline

0.1.7

Toggle 0.1.7's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
uncomment centos test for vagrant

0.1.6

Toggle 0.1.6's commit message
null value in YAML causing issues for Ansible Galaxy import

0.1.5

Toggle 0.1.5's commit message
STIG v1r2 updates (ansible-lockdown#37)

* remove RHEL-07-030790 per V1R2 STIG release

* removed comment about typo in STIG RHEL-07-040330 as it has been correct

* updated RHEL-07-020100 task to reflect changes in V1R2 to use blacklist.conf and blacklist usb-storage

* added capability to specify the boot superuser name

* update README to V1R2

0.1.4

Toggle 0.1.4's commit message
merge ssh and travis fixes from devel (ansible-lockdown#36)

* Validate command must use absolute path (ansible-lockdown#32)

* Validate command must use absolute path

This is a fix for ansible-lockdown#31

* update cat2 validate tasks to use absolute path

* fix for missing host keys

* force pip to upgrade passlib

* Adjust ssh tags to match global format (ansible-lockdown#35)

* Update fix-cat2.yml

* Update fix-cat1.yml

0.1.3

Toggle 0.1.3's commit message
Merge pull request ansible-lockdown#30 from samdoran/master

Update stable master

0.1.2

Toggle 0.1.2's commit message
Firewall Service - Ability to have iptables (ansible-lockdown#20)

* Add firewall service variable to readme

* Add firewall service variable to defaults

* have tasks use variable

* Name the tag as firewall

0.1.1

Toggle 0.1.1's commit message
Updates to the STIG role (ansible-lockdown#16)

* get rid of .retry files in ansible.cfg and update test.yml playbook to correct path

* ignore vagrant files

* add some override variables to vars/main.yml

* add vars for each STIG check, remove audit task vars, and update several others

* update sshd handler name to reflect service name

* move version checks to use assert instead of fail

* comment out audit task files while we work to remove unnessecary audit tasks

* move needed audit/register tasks into prelim.yml file and include it in main.yml

* update STIG ID numbering to V1R1, add conditionals so we can enable/disable each STIG task, and add notimplemented tag to command: "true" tasks

* CAT II: update STIG ID numbering to V1R1, add conditionals so we can enable/disable each STIG task, and add notimplemented tag to command: "true" tasks

* CAT I: update STIG ID numbering to V1R1, add conditionals so we can enable/disable each STIG task, and add notimplemented tag to command: "true" tasks

* update defaults

* add service variables and update aide cron settings

* cat1, cat2, cat3 tasks are working

* move prelim tasks into cat1 file and use blocks to group related tasks

* fixup some cat2 tasks and minor updates to make it work on centos

0.1.0

Toggle 0.1.0's commit message
Merge branch 'devel'