Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / dev-sec/ansible-collection-hardening issues and pull requests

#806 - Document correct quotes for ssh_permit_tunnel parameter

Pull Request - State: closed - Opened by vmpr about 1 month ago - 1 comment
Labels: ssh_hardening, documentation

#805 - fixing missing quotes for ssh_permit_tunnel parameter in README.md

Pull Request - State: closed - Opened by vmpr about 1 month ago - 2 comments
Labels: invalid, ssh_hardening

#804 - fix(docs): add 'become: true' to example playbooks. fix #787

Pull Request - State: closed - Opened by rndmh3ro about 1 month ago
Labels: patch, hacktoberfest-accepted, mysql_hardening, os_hardening, ssh_hardening, nginx_hardening, documentation

#803 - os_hardening: /tmp privs erroneously apply as 03361

Issue - State: open - Opened by shaunsmiley-xevo about 1 month ago - 1 comment
Labels: bug

#802 - chore(deps): update dependency ansible-core to v2.17.5

Pull Request - State: closed - Opened by renovate[bot] about 1 month ago

#801 - Don't run tests if the environment is not correct

Pull Request - State: closed - Opened by schurzi about 1 month ago
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#800 - chore(deps): update actions/checkout digest to eef6144

Pull Request - State: closed - Opened by renovate[bot] about 1 month ago
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#799 - feat: Corrected package name

Pull Request - State: closed - Opened by PapaPeskwo about 1 month ago - 1 comment
Labels: hacktoberfest, patch, ssh_hardening

#798 - Use Python venv for VM tests

Pull Request - State: closed - Opened by schurzi about 1 month ago

#797 - Remove unused files and variables

Pull Request - State: closed - Opened by schurzi about 1 month ago - 1 comment
Labels: os_hardening

#796 - Allow configuring the name_format variable in auditd config

Issue - State: open - Opened by nbrys about 1 month ago
Labels: enhancement, help wanted

#795 - chore(deps): update ansible/ansible-lint digest to 3b5bee1

Pull Request - State: closed - Opened by renovate[bot] about 2 months ago

#794 - Allow separate password login for sftp

Pull Request - State: open - Opened by mib1185 about 2 months ago
Labels: ssh_hardening

#793 - Disabled ssh.socket causes failure of ubuntu upgrade to 24.04

Issue - State: open - Opened by northys 2 months ago
Labels: bug

#792 - chore(deps): update ansible/ansible-lint digest to 25f783c

Pull Request - State: closed - Opened by renovate[bot] 2 months ago

#791 - chore(deps): update dependency ansible-core to v2.17.4

Pull Request - State: closed - Opened by renovate[bot] 2 months ago

#790 - molecule scenario ssh_hardening if failing due to missing docker image

Issue - State: closed - Opened by seven-beep 2 months ago - 1 comment
Labels: bug

#789 - Provide granular noop for ssh configuration

Pull Request - State: open - Opened by seven-beep 2 months ago - 5 comments
Labels: ssh_hardening

#788 - chore(deps): update actions/setup-python digest to f677139

Pull Request - State: closed - Opened by renovate[bot] 3 months ago
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#787 - getent_shadow empty

Issue - State: closed - Opened by rvodden 3 months ago - 4 comments
Labels: bug

#786 - chore(deps): update dependency ansible-core to v2.17.3

Pull Request - State: closed - Opened by renovate[bot] 3 months ago

#784 - Update Debian compatibility

Pull Request - State: closed - Opened by schurzi 3 months ago
Labels: bug, patch, mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#783 - Update to current Fedora releases

Pull Request - State: closed - Opened by schurzi 4 months ago - 2 comments
Labels: patch, os_hardening, ssh_hardening

#782 - Remove deprecated rebuild of initrd

Pull Request - State: closed - Opened by schurzi 4 months ago - 1 comment
Labels: os_hardening, major

#780 - Allow skipping /proc mount options management

Issue - State: open - Opened by Tristan971 4 months ago
Labels: enhancement

#779 - chore(deps): update ansible/ansible-lint digest to 95382d3

Pull Request - State: closed - Opened by renovate[bot] 4 months ago

#778 - chore(deps): update actions/setup-python digest to 39cd149

Pull Request - State: closed - Opened by renovate[bot] 4 months ago
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#777 - remove tests for FreeBSD12 since it's out of support

Pull Request - State: closed - Opened by schurzi 4 months ago
Labels: minor, ssh_hardening

#776 - chore(deps): pin dependencies

Pull Request - State: closed - Opened by renovate[bot] 5 months ago
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#775 - Use best-practice preset for renovate

Pull Request - State: closed - Opened by schurzi 5 months ago

#774 - Ensure that ssh is installed (cf #771)

Pull Request - State: closed - Opened by Byh0ki 5 months ago - 11 comments
Labels: enhancement, minor, ssh_hardening

#773 - Pin GitHub Actions using Frizbee

Pull Request - State: closed - Opened by rdimitrov 5 months ago - 2 comments
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#772 - option to disable regeneration of ssh private key

Issue - State: closed - Opened by gowenpotato 5 months ago - 3 comments
Labels: enhancement

#771 - ssh: explicitly enable or disable the service at boot

Pull Request - State: closed - Opened by Byh0ki 5 months ago
Labels: enhancement, minor, ssh_hardening

#770 - Deprecate Centos Stream 8

Pull Request - State: closed - Opened by rndmh3ro 5 months ago
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#769 - disable systemd socket activation

Pull Request - State: closed - Opened by rndmh3ro 5 months ago
Labels: enhancement, ssh_hardening

#768 - ssh hardening role fails when `ssh_permit_root_login` var is set on ubuntu 24.04

Issue - State: closed - Opened by gpoblon 5 months ago - 2 comments
Labels: bug

#767 - centos7 is eol, remove it

Pull Request - State: closed - Opened by rndmh3ro 6 months ago - 3 comments
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening, major

#766 - fix spelling

Pull Request - State: closed - Opened by rndmh3ro 6 months ago
Labels: os_hardening, ssh_hardening

#765 - do not force type of ssh_gateway_ports

Pull Request - State: closed - Opened by rndmh3ro 6 months ago
Labels: bug, patch, mysql_hardening, os_hardening, ssh_hardening

#764 - Ubuntu 24.04 support

Issue - State: closed - Opened by camaeel 6 months ago - 1 comment
Labels: enhancement

#763 - Support systemd socket activation for sshd

Issue - State: closed - Opened by schurzi 6 months ago - 2 comments
Labels: enhancement, ssh_hardening

#762 - Change ssh config verify to workaround missing priv-separation dir

Pull Request - State: closed - Opened by rndmh3ro 6 months ago - 3 comments
Labels: ssh_hardening

#761 - feat: add fedora 40 to test matrix

Pull Request - State: closed - Opened by nejch 6 months ago - 4 comments
Labels: os_hardening, ssh_hardening

#760 - ci: define permissions for enforce-labels workflow

Pull Request - State: closed - Opened by fgreinacher 6 months ago - 1 comment

#759 - [Proposal] Restrict etc/cron* to root user only, add Password policies

Pull Request - State: closed - Opened by AhmedShaheen-MEC 6 months ago - 1 comment
Labels: os_hardening

#758 - Release 9.0.2

Issue - State: closed - Opened by whysthatso 7 months ago - 1 comment
Labels: enhancement

#757 - os_hardening fails when setting vm.mmap_rnd_bits

Issue - State: closed - Opened by hrmck 7 months ago - 3 comments
Labels: bug

#756 - chore(deps): update dependency ansible-core to v2.17.2

Pull Request - State: closed - Opened by renovate[bot] 7 months ago - 4 comments
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#754 - Update dependency ansible-core to v2.16.5

Pull Request - State: closed - Opened by renovate[bot] 8 months ago

#753 - Add pam.d flags to maintain compatiblity with FreeIPA deployments.

Issue - State: open - Opened by BlamKiwi 8 months ago - 1 comment
Labels: enhancement

#752 - Error: Missing privilege separation directory: /run/sshd

Issue - State: closed - Opened by fungiboletus 9 months ago - 13 comments
Labels: bug

#751 - Update dependency ansible-core to v2.16.4

Pull Request - State: closed - Opened by renovate[bot] 9 months ago

#750 - Make Publickey authentication configurable

Issue - State: closed - Opened by debbabi 9 months ago - 1 comment
Labels: enhancement

#749 - Add ssh_pubkey_authentication variable to ssh hardening

Pull Request - State: closed - Opened by debbabi 9 months ago
Labels: enhancement, ssh_hardening

#747 - Ansible Linting

Issue - State: closed - Opened by willifehler 9 months ago - 2 comments
Labels: enhancement

#746 - syslog-group not existing in Ubuntu 22.04 minimal

Issue - State: open - Opened by rndmh3ro 9 months ago - 1 comment
Labels: bug

#745 - Update ansible/ansible-lint action to v24

Pull Request - State: closed - Opened by renovate[bot] 9 months ago

#744 - Always update Vagrant Boxes before using

Pull Request - State: closed - Opened by schurzi 9 months ago
Labels: patch

#743 - Remove Docker containers on self-hosted runner after tests

Pull Request - State: closed - Opened by schurzi 9 months ago
Labels: patch

#742 - Update dependency ansible-core to v2.16.3

Pull Request - State: closed - Opened by renovate[bot] 10 months ago

#741 - harden permissions for directory mount /var/log fails for minimized Ubuntu 22.04

Issue - State: closed - Opened by bl4ko 10 months ago - 2 comments
Labels: bug

#740 - 9.0.0 version number in galaxy.yml file is wrong

Issue - State: closed - Opened by obvionaoe 10 months ago - 1 comment

#739 - restructure readme to move known limitations up top

Pull Request - State: closed - Opened by rndmh3ro 10 months ago
Labels: patch, os_hardening, ssh_hardening, documentation

#738 - release only on releases, not pre-releases

Pull Request - State: closed - Opened by rndmh3ro 11 months ago

#737 - Update dependency ansible-core to v2.16.2

Pull Request - State: closed - Opened by renovate[bot] 11 months ago

#736 - fix linting for github config

Pull Request - State: closed - Opened by rndmh3ro 11 months ago

#735 - Fails to install

Issue - State: closed - Opened by Paddy-CH 11 months ago - 2 comments
Labels: bug

#734 - Amazon Linux gpg check fails

Issue - State: closed - Opened by Paddy-CH 11 months ago - 1 comment
Labels: bug

#733 - Update actions/setup-python action to v5

Pull Request - State: closed - Opened by renovate[bot] 11 months ago

#731 - Extend ansible-lint testing to cover our test cases

Issue - State: closed - Opened by schurzi 11 months ago
Labels: enhancement

#730 - update labeler to new config format

Pull Request - State: closed - Opened by schurzi 11 months ago
Labels: ssh_hardening

#729 - Test multiple supported Ansible versions

Issue - State: open - Opened by schurzi 11 months ago - 2 comments
Labels: enhancement

#728 - Update dependency ansible-core to v2.16.1

Pull Request - State: closed - Opened by renovate[bot] 12 months ago - 1 comment
Labels: os_hardening

#727 - Make value of kernel.unprivileged_userns_clone depending on kernel version

Issue - State: closed - Opened by deimi 12 months ago - 4 comments
Labels: enhancement

#726 - Add tags for cron.yml

Pull Request - State: closed - Opened by yabinma 12 months ago
Labels: os_hardening

#725 - Add Support for PostgreSQL

Pull Request - State: open - Opened by professormahi 12 months ago - 4 comments

#724 - Feature Request: Alpine support for ssh hardening

Issue - State: open - Opened by haxwithaxe 12 months ago - 1 comment
Labels: enhancement

#722 - support restarts of audit service on Arch linux

Pull Request - State: closed - Opened by schurzi 12 months ago
Labels: enhancement, os_hardening

#721 - pin Ansible to always let Renovate update to the most current version in our tests

Pull Request - State: closed - Opened by schurzi 12 months ago
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#720 - update python versions for testing

Pull Request - State: closed - Opened by schurzi 12 months ago
Labels: invalid, os_hardening

#719 - ssh_hardening ipv6

Issue - State: closed - Opened by Wolvez1911 12 months ago - 2 comments
Labels: bug

#718 - Restore idempotency for disabling unused filesystems with Ansible 2.16.0

Pull Request - State: closed - Opened by akikanellis 12 months ago - 8 comments
Labels: bug, os_hardening

#717 - Make disabling unused filesystems idempotent

Pull Request - State: closed - Opened by akikanellis 12 months ago
Labels: os_hardening

#716 - Job for auditd.service invalid

Issue - State: open - Opened by fernando-eickhoff 12 months ago - 4 comments
Labels: bug

#715 - make it possible to configure more then yes and no for PermitTunnel

Pull Request - State: closed - Opened by rndmh3ro 12 months ago
Labels: enhancement, breaking, ssh_hardening, major

#714 - update status badges in README

Pull Request - State: closed - Opened by schurzi 12 months ago
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#713 - Match RedHat vars for Rocky 9

Pull Request - State: closed - Opened by BorysVrublevskyi 12 months ago - 2 comments
Labels: mysql_hardening, os_hardening, ssh_hardening

#712 - match RedHat vars for Rocky 9

Pull Request - State: closed - Opened by BorysVrublevskyi 12 months ago
Labels: mysql_hardening, os_hardening, ssh_hardening

#711 - fix CI test for os_hardening

Pull Request - State: closed - Opened by schurzi about 1 year ago
Labels: os_hardening

#710 - fix nginx CI tests

Pull Request - State: closed - Opened by schurzi about 1 year ago
Labels: patch, nginx_hardening

#709 - add testing and support for current versions of Fedora and FreeBSD

Pull Request - State: closed - Opened by schurzi about 1 year ago - 2 comments
Labels: enhancement, minor, os_hardening, ssh_hardening

#704 - docs: restructure variables overview to table

Pull Request - State: closed - Opened by Nemental about 1 year ago - 1 comment
Labels: mysql_hardening, os_hardening, ssh_hardening, nginx_hardening

#697 - sshd_hardening role cannot be used to build system images

Issue - State: closed - Opened by mbenabda about 1 year ago - 1 comment
Labels: bug