Commit Graph

98 Commits

Author SHA1 Message Date
uk-bolly 30719a77b5
Merge pull request #6 from ansible-lockdown/apt_update
moved apt update order to assist with audit
2025-01-21 16:22:21 +00:00
uk-bolly c8e368e541
Merge pull request #5 from ansible-lockdown/pre-commit-ci-update-config
[pre-commit.ci] pre-commit autoupdate
2025-01-21 16:21:55 +00:00
Mark Bolwell bba53315f2
moved apt update order to assist with audit
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-21 08:07:27 +00:00
pre-commit-ci[bot] 46e23a7c4b
[pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/gitleaks/gitleaks: v8.23.0 → v8.23.1](https://github.com/gitleaks/gitleaks/compare/v8.23.0...v8.23.1)
- [github.com/ansible-community/ansible-lint: v24.12.2 → v25.1.0](https://github.com/ansible-community/ansible-lint/compare/v24.12.2...v25.1.0)
2025-01-20 17:45:16 +00:00
uk-bolly 7a1b8b5250
Merge pull request #4 from ansible-lockdown/pre-commit-ci-update-config
[pre-commit.ci] pre-commit autoupdate
2025-01-14 08:14:20 +00:00
uk-bolly 1b98e1ed7b
Merge pull request #3 from ansible-lockdown/jan25_updates
Jan25 updates
2025-01-13 20:04:27 +00:00
pre-commit-ci[bot] a857b1e552
[pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/gitleaks/gitleaks: v8.21.2 → v8.23.0](https://github.com/gitleaks/gitleaks/compare/v8.21.2...v8.23.0)
- [github.com/ansible-community/ansible-lint: v24.10.0 → v24.12.2](https://github.com/ansible-community/ansible-lint/compare/v24.10.0...v24.12.2)
2025-01-13 17:50:19 +00:00
Mark Bolwell 5de8d4c558
Added optional logrotate install and variable, improved 6.1.3.8 logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 15:33:10 +00:00
Mark Bolwell 7095fdc49f
added rsyslog override logging option
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 14:29:47 +00:00
Mark Bolwell d190c51fa4
Updated since ubuntu removes unncessary time pkgs
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 14:00:34 +00:00
Mark Bolwell e69c18fa1c
improved audit handler and related rules
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 13:16:56 +00:00
Mark Bolwell 6e78559776
tidy up grub/bootloader logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 12:40:06 +00:00
Mark Bolwell 18152bc17d
fix conditional for snap/squashfs
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 12:39:13 +00:00
Mark Bolwell 113b32018f
profile script
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 12:38:24 +00:00
Mark Bolwell cc307541a9
5.4.3.3 updated to add profile script
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 12:37:54 +00:00
Mark Bolwell 9709aa503b
5.4.3.2 updated permissions
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 09:27:23 +00:00
Mark Bolwell b7bdc7f67c
Updated bootloader hash var and time tool inherit
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 09:26:52 +00:00
Mark Bolwell 3c62843418
fixed file permissions 2.3.2.1
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 09:05:37 +00:00
Mark Bolwell c129cf0552
removed mask section u24 now removes time package not used automatically
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 09:03:01 +00:00
Mark Bolwell 3e92d4b54b
fixed permissions 5.4.3.2
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 08:40:32 +00:00
uk-bolly cffe5e4056
Merge pull request #1 from ansible-lockdown/quote_fix
Minor update
2025-01-07 19:02:40 +00:00
Mark Bolwell 01df043bdd
moved welcome to github self-hosted
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-07 18:32:29 +00:00
Mark Bolwell 08987aca24
fixed quotes on line25
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-07 18:20:54 +00:00
Mark Bolwell 909fdd414c
updated company naming
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-06 08:43:45 +00:00
uk-bolly 1e286afdd8
Merge pull request #5 from ansible-lockdown/align_audit_mounts
Align audit mounts
2024-12-11 16:45:37 +00:00
Mark Bolwell f77befa17e
lint mode update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 11:50:29 +00:00
Mark Bolwell 0dce656a92
lint update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 11:04:24 +00:00
Mark Bolwell cd84a2930d
updated variable name
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 10:23:16 +00:00
Mark Bolwell 853faab523
Added comment on set_fact for mountpoints
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 10:23:05 +00:00
Mark Bolwell 66ca3976a9
fixed spacing
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 10:10:22 +00:00
Mark Bolwell b2cded315b
Updated mountpoint vars correctly
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-11 10:10:14 +00:00
Mark Bolwell de47c63145
Updated auditd handler
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-10 12:22:34 +00:00
Mark Bolwell 4f5a3f7c8d
Update to mounts section1
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-10 12:07:31 +00:00
Mark Bolwell 342489f4d9
lint update
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-10 12:07:14 +00:00
Mark Bolwell a39fb43a48
Updated lint file
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-10 12:06:56 +00:00
uk-bolly b87b6fbefd
Merge pull request #4 from ansible-lockdown/alignment
Alignment
2024-12-10 08:13:27 +00:00
Mark Bolwell 21b0465270
updated changelog
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-06 14:18:50 +00:00
Mark Bolwell e7d6d56fb9
lint updated spacing and multiple improvements
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-06 14:16:39 +00:00
Mark Bolwell 6484302013
updated lint files
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-12-06 14:16:05 +00:00
uk-bolly edc2819272
Merge pull request #3 from ansible-lockdown/2.2_control_updates
2.2 control updates
2024-09-26 13:25:08 +01:00
Mark Bolwell a22741daa9
idempotent improvements, var fixes
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-09-26 08:06:51 +01:00
Mark Bolwell 1f90fef6dd
Updated thanks to @mathf
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-09-26 07:45:02 +01:00
Mark Bolwell 8453245572
removed old config
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-09-05 09:23:38 +01:00
Mark Bolwell bf35b0852e
workflow added
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-09-05 09:22:43 +01:00
Mark Bolwell c090ca580e
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-09-05 09:15:31 +01:00
Mark Bolwell 8e3457ee3c
blank lines removed
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-09-05 09:10:37 +01:00
Mark Bolwell 717d64851c
added improvement to 5.2.4
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-09-05 09:10:23 +01:00
Mark Bolwell 07c2ef5427
Initial
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2024-09-05 08:36:16 +01:00