Commits · 0175eecbcc9a637d37bb0de7112802003340464c · Digital Preservation / ansible_lza_server_hardening · GitLab

Snippets Groups Projects

Oct 11, 2024
- chore: migrate Rocky Linux 8 based tests to Alma Linux 8 · 0175eecb
  Jörg Sachse authored 8 months ago
  
  0175eecb
Sep 03, 2024
- Merge branch 'master' of... · 9ae5f7a6
  Jörg Sachse authored 9 months ago
  9ae5f7a6
- fix: make sure to remove all residuals of ClamAV from the system (packages, services) · 0d049107
  Jörg Sachse authored 9 months ago
  
  0d049107
- fix: set default policy in the last step instead of an earlier step to avoid getting locked out · 6eb912c4
  Jörg Sachse authored 9 months ago
  
  6eb912c4
- feat: add fail2ban exception for Greenbone Security Manager (GSM) · d1af9655
  Jörg Sachse authored 9 months ago
  
  d1af9655
Aug 12, 2024
- feat: add switch to make sure that ClamAV is not uninstalled on Archivematica-Servers · 12c80f67
  Jörg Sachse authored 10 months ago
  
  12c80f67
Aug 07, 2024
- chore: remove unnecessary clamav handlers · 213e53a2
  Jörg Sachse authored 10 months ago
  
  213e53a2
- feat: resolves GitLab issue 2368... · d2e3217f
  Jörg Sachse authored 10 months ago
  d2e3217f
Jul 26, 2024
- test: increase Molecule VMs' RAM to make sure clamav has enough RAM to even start without swapping · 94c6e77c
  Jörg Sachse authored 10 months ago
  
  94c6e77c
- test: run molecule destroy even if CI job fails · 948ef612
  Jörg Sachse authored 10 months ago
  
  948ef612
- feat: use Ansible's dnf module to install packages · 73b08844
  Jörg Sachse authored 10 months ago
  
  73b08844
- fix: improve task waiting for ClamAV signature databases to be downloaded by... · 89719f79
  Jörg Sachse authored 11 months ago
  89719f79
- chore: cleanup unused code · 159f0a5d
  Jörg Sachse authored 11 months ago
  
  159f0a5d
- fix: remove EPEL installation task; we expect EPEL to be enabled on production... · 8835b09e
  Jörg Sachse authored 11 months ago
  8835b09e
- style: satisfy linter · d8f24e7d
  Jörg Sachse authored 11 months ago
  
  d8f24e7d
- chore: add options required by latest yamllint version · 9aabe334
  Jörg Sachse authored 11 months ago
  
  9aabe334
- chore: deprecate RHEL 7 and add Molecule/Gitlab-CI compatibility for Rocky 8 · afb08d0c
  Jörg Sachse authored 11 months ago
  
  afb08d0c
Feb 21, 2024
- style: use deb822 format and remove deprecated apt_key (resolves #2233 / ND-2723) · 79861b67
  Jörg Sachse authored 1 year ago
  
  79861b67
Jan 29, 2024
- fix: undo changes done with the systemd override for rpcbind.socket, because... · b1064159
  Jörg Sachse authored 1 year ago
  b1064159
Dec 22, 2023
- fix: create working version of rpcbind configuration · 4f738758
  Jörg Sachse authored 1 year ago
  
  4f738758
- fix: use correct syntax for sshd_config · 4b693b08
  Jörg Sachse authored 1 year ago
  
  4b693b08
- sec: implement Terrapin (CVE-2023-48795) config mitigations while patches are unavailable · 75556bf3
  Jörg Sachse authored 1 year ago
  
  75556bf3
Dec 07, 2023
- feat: prepare tasks for NFSv3 rpcbind risk mitigations. CAUTION: as we're... · 7200fc1c
  Jörg Sachse authored 1 year ago
  7200fc1c
Nov 15, 2023
- feat: resolve ND-2709 'Bereinigung clamd-Services Rosetta-Server' · f1a4cab6
  Jörg Sachse authored 1 year ago
  
  f1a4cab6
Oct 09, 2023
- feat: update ClamAV config · 42aa5529
  Jörg Sachse authored 1 year ago
  
  42aa5529
- feat: update Freshclam config & services · e31ef7f7
  Jörg Sachse authored 1 year ago
  
  e31ef7f7
- feat: assume 'state: present' for new iptables rules, unless something different is explicitely set · c5992139
  Jörg Sachse authored 1 year ago
  
  c5992139
Oct 02, 2023
- feat: assume 'state: present' for new iptables rules, unless something different is explicitely set · f096ff69
  Jörg Sachse authored 1 year ago
  
  f096ff69
Aug 30, 2023
- Merge branch 'fix_ci' into 'master' · 83a4aabc
  Jörg Sachse authored 1 year ago
  83a4aabc
- test: adapt Molecule setup to suit peculiarities from the latest Molecule v6 release · 624ad926
  Jörg Sachse authored 1 year ago
  
  624ad926
Aug 21, 2023
- fix: remove non-existent package · 361bce80
  Jörg Sachse authored 1 year ago
  
  361bce80
Jun 27, 2023
- Merge branch 'master' of... · c5ed0628
  Jörg Sachse authored 1 year ago
  c5ed0628
- style: satisfy linter · 8e26326c
  Jörg Sachse authored 1 year ago
  
  8e26326c
- test: use external linting instead of deprecated 'molecule lint' · 11dbd69a
  Jörg Sachse authored 1 year ago
  
  11dbd69a
- sec: block ICMP timestamp requests/replies · 71537746
  Jörg Sachse authored 1 year ago
  
  71537746
Apr 27, 2023
- Merge branch 'master' of... · 33d5b63f
  Jörg Sachse authored 2 years ago
  33d5b63f
- feat: set 'AllowTcpForwarding yes' for ExL support to tunnel services to their... · a55dc3cf
  Jörg Sachse authored 2 years ago
  a55dc3cf
Mar 06, 2023
- fix: install iptables-persistent to make sure iptables rules are boot persistent · 0a8a885a
  Jörg Sachse authored 2 years ago
  
  0a8a885a
Mar 02, 2023
- feat: prohibit SSH login with anything other than publickey and for certain users · 2a52041a
  Jörg Sachse authored 2 years ago
  
  2a52041a
Aug 09, 2022
- fix: loop syntax · f26accad
  Jörg Sachse authored 2 years ago
  
  f26accad

DE: Impressum · Datenschutzerklärung | EN: Legal Notice · Privacy Policy