1402 Commits

Author SHA1 Message Date
uk-bolly c7ed4de9a8 Merge pull request #444 from ansible-lockdown/april26
April26
2026-04-16 17:03:34 +01:00
Mark Bolwell 2ac71da85c updated handlers
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-04-10 16:54:31 +01:00
Mark Bolwell 2d1ae800b3 fixed typo
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-04-08 16:10:55 +01:00
Mark Bolwell 420e036a56 updated pkg and mask logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-04-08 13:58:13 +01:00
Mark Bolwell 53561fbf08 Improved mask logic and package names
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-04-08 13:51:01 +01:00
Mark Bolwell 201edf02e4 QA, lint, standards, var naming, title aming aligned
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-04-08 12:56:24 +01:00
Mark Bolwell 69bef1f371 bootloader updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-04-08 12:55:50 +01:00
Mark Bolwell dab815f7b6 lin and 7.1.12/13 logic improvements
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-04-08 12:53:02 +01:00
Mark Bolwell 2b17f3f168 updated tags on optional
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-04-08 12:52:40 +01:00
Mark Bolwell 5dfa35a487 Improved logic for masked steps
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-04-08 12:52:25 +01:00
Mark Bolwell 5783bf4ce4 Workflow updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-04-08 12:51:49 +01:00
uk-bolly bbc7eada94 Merge pull request #443 from ansible-lockdown/pre-commit-ci-update-config
[pre-commit.ci] pre-commit autoupdate
2026-04-08 11:33:30 +01:00
pre-commit-ci[bot] 00f7166596 [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/ansible-community/ansible-lint: v26.3.0 → v26.4.0](https://github.com/ansible-community/ansible-lint/compare/v26.3.0...v26.4.0)
2026-04-06 17:44:16 +00:00
Frederick Witty 9639444174 Merge pull request #441 from ansible-lockdown/pre-commit-ci-update-config
[pre-commit.ci] pre-commit autoupdate
2026-03-26 12:37:25 -04:00
pre-commit-ci[bot] 4288de9944 [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/gitleaks/gitleaks: v8.30.1 → v8.30.0](https://github.com/gitleaks/gitleaks/compare/v8.30.1...v8.30.0)
2026-03-23 17:39:30 +00:00
uk-bolly eedb2188c3 Merge pull request #438 from ansible-lockdown/pre-commit-ci-update-config
[pre-commit.ci] pre-commit autoupdate
2026-03-18 17:46:10 +00:00
uk-bolly 5e8ff2dc4a Merge pull request #439 from defnotyujine/fix_5.2.4
Added missing variable for task 5.2.4
2026-03-18 17:45:55 +00:00
uk-bolly 871c75d09e Merge pull request #437 from defnotyujine/fix-5.3.3.2.7
Updated Jinja template to fix compliance issues for control 5.3.3.2.7
2026-03-18 17:45:13 +00:00
uk-bolly ab6254aa7a Merge pull request #436 from defnotyujine/fix_5.1.10_5.1.11
Added always tag to ensure variable exists on CIS profile tag-based e…
2026-03-18 17:43:04 +00:00
pre-commit-ci[bot] decb9061d5 [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/gitleaks/gitleaks: v8.30.0 → v8.30.1](https://github.com/gitleaks/gitleaks/compare/v8.30.0...v8.30.1)
- [github.com/ansible-community/ansible-lint: v26.2.0 → v26.3.0](https://github.com/ansible-community/ansible-lint/compare/v26.2.0...v26.3.0)
2026-03-16 17:45:10 +00:00
defnotyujine ce40cd630c Added missing variable for task 5.2.4
Signed-off-by: defnotyujine <batauling1000@gmail.com>
2026-03-10 17:33:08 +08:00
defnotyujine e6ccdea365 Updated Jinja template to fix compliance issues for control 5.3.3.2.7
Signed-off-by: defnotyujine <batauling1000@gmail.com>
2026-03-09 19:19:02 +08:00
defnotyujine 83cf830f36 Added always tag to ensure variable exists on CIS profile tag-based execution
Signed-off-by: defnotyujine <batauling1000@gmail.com>
2026-03-09 17:39:10 +08:00
uk-bolly 497b3dc8d9 Merge pull request #433 from ansible-lockdown/pre-commit-ci-update-config
[pre-commit.ci] pre-commit autoupdate
2026-03-03 09:55:07 +00:00
pre-commit-ci[bot] e6ba3cea4a [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/ansible-community/ansible-lint: v26.1.1 → v26.2.0](https://github.com/ansible-community/ansible-lint/compare/v26.1.1...v26.2.0)
2026-03-02 17:47:33 +00:00
Frederick Witty 587dfb40cf Merge pull request #429 from ansible-lockdown/pub_feb26_updates
Pub feb26 updates
2026-02-12 10:14:46 -05:00
Mark Bolwell 25b9934ce0 removed dup key
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-12 12:17:31 +00:00
uk-bolly 3015e2fe2f Merge branch 'devel' into pub_feb26_updates
Signed-off-by: uk-bolly <69214557+uk-bolly@users.noreply.github.com>
2026-02-12 09:54:10 +00:00
Mark Bolwell 032c75924e Tidy up 5.3.2.1
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-12 09:49:52 +00:00
Mark Bolwell 98e89d8945 Latest fixes updates Feb26
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-12 09:15:05 +00:00
Frederick Witty 3cfcf00717 Merge pull request #63 from ansible-lockdown/Feb26_updates
Update .j2 branding
2026-02-11 17:01:56 -05:00
Frederick Witty f413385208 Update .j2 branding
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-02-11 15:39:59 -05:00
Frederick Witty 4aa09d558f Merge pull request #61 from ansible-lockdown/Feb26_updates
2026 Feb QA Fixes
2026-02-11 15:19:20 -05:00
Frederick Witty 71206432be QA fixes and rollback of audit_only logic
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-02-11 14:54:30 -05:00
uk-bolly 15ebe5500b Merge pull request #428 from draygoX/devel
Move rhel9cis_ipv6_disable_method to a better location
2026-02-11 09:32:37 +00:00
Frederick Witty 11becb32c5 QA Fixes
Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
2026-02-10 16:01:05 -05:00
Frederick Witty a6aa5895d5 Merge pull request #60 from ansible-lockdown/Feb26_updates
Enhance documents for password hash
2026-02-06 10:24:39 -05:00
Mark Bolwell 2863be6c02 tidied up comments to make it simpler
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-06 14:16:29 +00:00
Mark Bolwell 591f0d90f4 Updated comments for password hash and variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-06 12:49:05 +00:00
Frederick Witty 0a77d6859f Merge pull request #59 from ansible-lockdown/Feb26_updates
Feb26 updates
2026-02-05 16:01:24 -05:00
Mark Bolwell 3442801399 tidy up of variables and warning for bootloader password
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 20:29:37 +00:00
Mark Bolwell 9a3f458db0 Updated bootloader password logic and enabled old methods without change
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 18:10:29 +00:00
Mark Bolwell 9b091984db updated logic to allow manual hash to be added or filter
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 17:53:55 +00:00
Mark Bolwell f1786fe20f added passlib dependency documentation
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-05 10:39:04 +00:00
Mark Bolwell 83ee942ecf updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 09:18:36 +00:00
Mark Bolwell 943b570484 incorporated PR 345 thanks to @thulium-drake
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 09:01:55 +00:00
Mark Bolwell c7567a98ac fixed tags and audit logic
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-03 08:57:45 +00:00
Mark Bolwell eb9c96f335 Updated Company title
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-01 20:13:34 +00:00
Mark Bolwell 2708a28409 removed schedule tasks
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-01 20:09:48 +00:00
Mark Bolwell 3e27eb88de Updated
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2026-02-01 20:09:10 +00:00